Patent ID: 9100430
Filing Date: 2015-08-04
Classification: H04L,H04W

Abstract:
1. A computerized method comprising: by a computing device having one or more computer processors and a non-transitory computer readable storage device storing software instruction for execution by the one or more computer processors, accessing or actively testing for, and processing information describing network traffic between a plurality of network devices; determining, based on the information describing network traffic, a network topology of the network, wherein the network topology comprises a plurality of nodes each connected by an edge to one or more of the plurality of nodes, and wherein each node is associated with one or more network devices and each edge represents a communication path between two nodes; access and process user account access records indicating historical user access to network nodes; associating identifications of user accounts with respective nodes which records indicate those users have accessed; access and process user account access rights indicating user account access rights to specific network devices; associating identifications of user accounts permitted to access network devices with respective nodes associated with the network devices; integrating user access records with user access privileges in order to identify permissions issues; generating user interface data comprising an interactive graph expressing the network topology; overlaying other relevant data sources on the aforementioned graph (like physical access logs or privileges); including one or more indications of user access rights/user access records to respective nodes of the network topology; and deriving recommendations or alerts for the system administrator.