Threat mitigation system and method

Patent metadata

Field	Value
Publication number	US-12413623-B2
Application number	US-202117333553-A
Country	US
Kind code	B2
Filing date	May 28, 2021
Priority date	May 28, 2020
Publication date	Sep 9, 2025
Grant date	Sep 9, 2025

Abstract

A computer-implemented method, computer program product and computing system for: establishing connectivity with a plurality of security-relevant subsystems within a computing platform; defining a specific task to be executed on one or more of the plurality of security-relevant subsystems, thus defining one or more target security-relevant subsystems; commissioning a container-based job within which the specific task will be executed; and executing the specific task within the container-based job.

First claim

What is claimed is:

1. A computer-implemented method, executed on a computing device, comprising:
establishing connectivity with a plurality of security-relevant subsystems within a computing platform;
defining a common specific task to be executed on each of the plurality of security-relevant subsystems, thus defining a plurality of target security-relevant subsystems, wherein defining the common specific task includes:
defining a unified specific task; and
denormalizing the unified specific task to define a subsystem-specific task for each of the plurality of target security-relevant subsystems, thus defining a plurality of subsystem-specific tasks, wherein each subsystem specific task includes one or more bespoke commands or operations to be performed on a respective security-relevant subsystems for accomplishing the unified specific task;

commissioning a container-based job within which the common specific task will be executed; and
executing the common specific task on each of the plurality of security-relevant subsystems within the container-based job.

2. The computer-implemented method of claim 1 wherein commissioning a container-based job within which the specific task will be executed includes:
associating the container-based job with a job-specific IP address.

3. The computer-implemented method of claim 2 wherein communication with the one or more target security-relevant subsystems is effectuated via the job-specific IP address.

4. The computer-implemented method of claim 1 further comprising:
decommissioning the container-based job.

5. The computer-implemented method of claim 4 wherein decommissioning the container-based job includes one or more of:
automatically decommissioning the container-based job upon completion of the execution of the specific task on the one or more target security-relevant subsystems; and
manual decommissioning the container-based job prior to completion of the execution of the specific task on the one or more target security-relevant subsystems.

6. The computer-implemented method of claim 4 wherein decommissioning the container-based job includes:
releasing a job-specific IP address associated with the container-based job.

7. The computer-implemented method of claim 1 further comprising:
providing the one or more subsystem-specific tasks to the one or more target security-relevant subsystems.

8. The computer-implemented method of claim 1 wherein the plurality of security-relevant subsystems includes one or more of:
CDN (i.e., Content Delivery Network) systems;
DAM (i.e., Database Activity Monitoring) systems;
UBA (i.e., User Behavior Analytics) systems;
MDM (i.e., Mobile Device Management) systems;
IAM (i.e., Identity and Access Management) systems;
DNS (i.e., Domain Name Server) systems;
Antivirus systems;
operating systems;
data lakes;
data logs;
security-relevant software applications;
security-relevant hardware systems; and
resources external to the computing platform.

9. A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:
establishing connectivity with a plurality of security-relevant subsystems within a computing platform;
defining a common specific task to be executed on of each of the plurality of security-relevant subsystems, thus defining a plurality of target security-relevant subsystems, wherein defining the common specific task includes:
defining a unified specific task; and
denormalizing the unified specific task to define a subsystem-specific task for each of the plurality of target security-relevant subsystems, thus defining a plurality of subsystem-specific tasks, wherein each subsystem specific task includes one or more bespoke commands or operations to be performed on a respective security-relevant subsystems for accomplishing the unified specific task;

commissioning a container-based job within which the common specific task will be executed; and
executing the common specific task on each of the plurality of security-relevant subsystems within the container-based job.

10. The computer program product of claim 9 wherein commissioning a container-based job within which the specific task will be executed includes:
associating the container-based job with a job-specific IP address.

11. The computer program product of claim 10 wherein communication with the one or more target security-relevant subsystems is effectuated via the job-specific IP address.

12. The computer program product of claim 9 further comprising:
decommissioning the container-based job.

13. The computer program product of claim 12 wherein decommissioning the container-based job includes one or more of:
automatically decommissioning the container-based job upon completion of the execution of the specific task on the one or more target security-relevant subsystems; and
manual decommissioning the container-based job prior to completion of the execution of the specific task on the one or more target security-relevant subsystems.

14. The computer program product of claim 12 wherein decommissioning the container-based job includes:
releasing a job-specific IP address associated with the container-based job.

15. The computer program product of claim 9 further comprising:
providing the one or more subsystem-specific tasks to the one or more target security-relevant subsystems.

16. The computer program product of claim 9 wherein the plurality of security-relevant subsystems includes one or more of:
CDN (i.e., Content Delivery Network) systems;
DAM (i.e., Database Activity Monitoring) systems;
UBA (i.e., User Behavior Analytics) systems;
MDM (i.e., Mobile Device Management) systems;
IAM (i.e., Identity and Access Management) systems;
DNS (i.e., Domain Name Server) systems;
Antivirus systems;
operating systems;
data lakes;
data logs;
security-relevant software applications;
security-relevant hardware systems; and
resources external to the computing platform.

17. A computing system including a processor and memory configured to perform operations comprising:
establishing connectivity with a plurality of security-relevant subsystems within a computing platform;
defining a common specific task to be executed on each of the plurality of security-relevant subsystems, thus defining a plurality of target security-relevant subsystems, wherein defining the common specific task includes:
defining a unified specific task; and
denormalizing the unified specific task to define a subsystem-specific task for each of the plurality of target security-relevant subsystems, thus defining a plurality of subsystem-specific tasks, wherein each subsystem specific task includes one or more bespoke commands or operations to be performed on a respective security-relevant subsystems for accomplishing the unified specific task;

commissioning a container-based job within which the common specific task will be executed; and
executing the common specific task on each of the plurality of security-relevant subsystems within the container-based job.

18. The computing system of claim 17 wherein commissioning a container-based job within which the specific task will be executed includes:
associating the container-based job with a job-specific IP address.

19. The computing system of claim 18 wherein communication with the one or more target security-relevant subsystems is effectua

Assignees

• Reliaquest Holdings Llc

Inventors

• Murphy Brian P
• Partlow Joe
• O'Connor Colin
• Pfeiffer Jason
• Murphy Brian Philip

Classifications

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• G06F2009/45587

  Isolation or security of virtual machine instances · CPC title

• G06F2009/45562

  Creating, deleting, cloning virtual machine instances · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• G06F21/554

  involving event detection and direct action · CPC title