Systems and methods for managing endpoint security states using passive data integrity attestations

US11176276B1 · kind B1 · utility

Assignee

• CA, Inc. · US

Inventors

• Joseph Chen · Los Angeles, US
• QuBo Song · Culver City, US
• Spencer Smith · El Segundo, US
• Shaun Aimoto · Schreiber, CA
• Haik Mesropian · Glendale, US
• David Kane · Los Angeles, US
• Peter Ferrie · Los Angeles, US
• Jordan Saxonberg · Los Angeles, US
• Costin Ionescu · Redondo Beach, US

Key dates

• Filing date: May 22, 2019
• Grant date: Nov 16, 2021
• Expiry date: Mar 10, 2040

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/034
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

The disclosed computer-implemented method for managing endpoint security states using passive data integrity attestations may include (i) receiving passively collected network data from an endpoint device of a computing environment, (ii) determining a security state of the endpoint device using the passively collected network data from the endpoint device, (iii) determining that the security state of the endpoint device is below a threshold, and (iv) in response to determining that the security state of the endpoint device is below a threshold, performing a security action to protect the computing environment against malicious actions. Various other methods, systems, and computer-readable media are also disclosed.