Patent ID: 7293287

Claim:
A computer-implemented method comprising: defining a network security model having objects representing network security components and including one or more relationships among said network security components; developing a network security topology of said network security components by instantiating specific instances of objects defined by said network security model; correlating, by a security correlation engine, network security domain information among one or more network security components in said network security topology; sending, by the security correlation engine, the network security domain information to a network security fault analysis tool; correlating, by a network correlation engine, network management domain information among one or more network management components in a network management topology; sending, by the network correlation engine, the network management domain information to the network security fault analysis tool; receiving, by the network security fault analysis tool, the network security domain information and the network management domain information, wherein the network security fault analysis tool is separate from the security correlation engine and the network correlation engine; automatically cross-correlating, by the network security fault analysis tool, the network security domain information with the network management domain information to determine a root cause for a detected problem; automatically producing a common operational picture that includes a combination of the network security domain information and the network management domain information; and displaying the root cause and the common operational picture on a network management station.