Mcafee, Inc.

Tenable, Inc.

Clint R Merrill

John Douglas Teddy

Zheng Zhang

Kunal Mehta

Craig D Schmugar

Renaud Deraison

Erdem Aktas

Nicholas Miles

Charles Joseph Bacon

Nicolas Pouvesle

Katherine Alice Sexton

John Walker

In an embodiment, a security auditing component obtains a solution set that is based upon a security audit of an enterprise network, the solution set characterizing a set of solutions associated with a set of security issues associated with one or more assets of the enterprise network, detects that the solution set can be condensed into a condensed solution set that mitigates the set of security issues to the same degree as the solution set, the detection being based at least in part upon (i) one or more rules applied to one or more solution texts and/or (ii) asset-specific metadata and/or (iii) static metadata, and condenses, based on the detecting, the solution set into the condensed solution set by combining two or more subsets of related solutions and/or filtering the solution set to remove one or more subsets of redundant or superseded solutions.

Managing supersedence of solutions for security issues among assets of an enterprise network

There is disclosed in an example a computing apparatus, including: a process deprivilging engine operable for: recognizing that a process has an undetermined reputation; intercepting a first access request directed to a first resource; determining that the first resource is not owned by the process; and at least partially blocking access to the first resource. There is further disclosed a method of providing the process deprivileging engine, and one or more computer-readable mediums having stored thereon executable instructions for providing the process deprivileging engine.

Temporary process deprivileging

Growing community of inventors

Hillsboro, OR, United States of America

Clint R Merrill