Method and system for managing compliance of one or more network devices

Patent metadata

Field	Value
Publication number	US-2016352640-A1
Application number	US-201514813316-A
Country	US
Kind code	A1
Filing date	Jul 30, 2015
Priority date	Jun 1, 2015
Publication date	Dec 1, 2016
Grant date	—

Abstract

Embodiments of the present disclosure disclose a method and a device for managing compliance of one or more network devices. The method comprises receiving one or more configuration changes of the one or more network devices. Also, the method comprises identifying each configuration change as one of a compliant configuration change and a non-compliant configuration change by correlating, the one or more configuration changes using a first set of parameters. Further, the method generating an impact value of the one or more configuration changes and generating a recommendation for the one or more network devices based on the impact value.

First claim

We claim:

1 . A method for managing compliance of one or more network devices, comprising:
receiving, by a compliance management computing device, one or more configuration changes of the one or more network devices; identifying, by the compliance management computing device, each configuration change as one of a compliant configuration change and a non-compliant configuration change by correlating, the one or more configuration changes using a first set of parameters; generating, by the compliance management computing device, an impact value of the one or more configuration changes; and generating, by the compliance management computing device, a recommendation for the one or more network devices based on the impact value.

2 . The method as claimed in claim 1 , wherein each of the one or more configuration changes is associated with at least one of a configuration change identifier, an actual command executed, time of the configuration change and originator of the configuration change.

3 . The method as claimed in claim 1 further comprising receiving, by a compliance management computing device, a second set of parameters associated with at least one of an organization security policy and baseline guideline rules corresponding to the one or more network devices.

4 . The method as claimed in claim 3 further comprising identifying each of the one or more configuration changes as one of compliant configuration change and non-compliant configuration change by validating the one or more configuration changes using the second set of parameters.

5 . The method as claimed in claim 4 further comprising verifying the validated one or more configuration changes and generating an alert if the configuration change is validated as non-compliant configuration change.

6 . The method as claimed in claim 1 , wherein generating the impact value comprises:
obtaining a critical value associated with the one or more network devices by analyzing the configuration changes using the first set of parameters and a third set of parameters; and generating an impact value based on at least one of the critical value, a violation severity value, or a probability of vulnerability exploited by one or more malicious elements.

7 . The method as claimed in claim 6 , wherein the third set of parameters is at least one of network connectivity, neighboring devices configuration, network device having internal facing or external facing and enrooting a network device to provide critical business services.

8 . The method as claimed in claim 1 further comprising generating a recommendation using historical data associated with one or more impact values of the one or more network devices.

9 . The method as claimed in claim 1 further comprising generating, by the compliance management computing device, a report based on at least one of the identified configuration change, impact value and the recommendation.

10 . A compliance management computing device for managing compliance of one or more network devices, comprising:
a processor; and a memory communicatively coupled to the processor, wherein the memory stores processor-executable instructions, which, on execution, causes the processor to:
receive one or more configuration changes of the one or more network devices;
identify each configuration change as one of a compliant configuration change and a non-compliant configuration change by correlating, the one or more configuration changes using a first set of parameters;
generate an impact value of the one or more configuration changes; and
generate a recommendation to the one or more network devices based on the impact value.

11 . The device as claimed in claim 10 , wherein each of the one or more configuration changes is associated with at least one of configuration identifier, an actual command executed, time of the configuration change and originator of the configuration change.

12 . The device as claimed in claim 10 further comprising the processor configured to receiving a second set of parameters associated with at least one of an organization security policy and baseline guideline rules corresponding to the one or more network devices.

13 . The device as claimed in claim 12 , wherein the processor is further configured to identifying each of the one or more configuration changes as one of compliant configuration change and non-compliant configuration change by validating the one or more configuration changes using the second set of parameters.

14 . The device as claimed in claim 13 , wherein the processor is further configured to verify the validated one or more configuration changes and generate an alert if the configuration change is validated as non-compliant configuration change.

15 . The device as claimed in claim 10 , wherein the processor is configured to generate an impact value comprises:
obtaining a critical value associated with the one or more network devices by analyzing the configuration changes using the first set of parameters and a third set of parameters; and generating an impact value based on at least one of the critical value, a violation severity value, and a probability of vulnerability exploited by one or more malicious elements.

16 . The device as claimed in claim 15 , wherein the third set of parameters is at least one of network connectivity, neighboring devices configuration, network device having internal facing or external facing and enrooting a network device to provide critical business services.

17 . The device as claimed in claim 10 further comprises the processor configured to generate a recommendation using historical data associated with one or more impact values of the one or more network devices

18 . The device as claimed in claim 10 further comprises the processor configured to generate a report based on at least one of the identified configuration change, impact value and the recommendation.

19 . A non-transitory computer readable medium including instructions stored thereon that when processed by at least one processor cause a system to perform operations comprising:
receive one or more configuration changes of the one or more network devices; identify each configuration change as one of a compliant configuration change and a non-compliant configuration change by correlating, the one or more configuration changes using a first set of parameters; generate an impact value of the one or more configuration changes; and generate a recommendation for the one or more network devices based on the impact value.

Assignees

• Wipro Ltd

Inventors

• KOMPELLA Anasuya Devi
• JAMADAR Asif Husainsaheb
• Jha Anand Raj

Classifications

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title

• H04L47/20 Primary

  Traffic policing · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L41/0894

  Policy-based network configuration management · CPC title