AT&T Intellectual Property I, LP

Stephen Roderick

Michael Singer

William O'Hern

John L Coviello

Keith Roden

In one embodiment, the present invention is a method and apparatus for distributing network security advisory information. In one embodiment, each user creates a profile describing his or her preferences with regard to the receipt of security advisory information (e.g., types of security advisory information he or she wishes to receive, the channels over which he or she wishes to receive the security advisory information). Incoming security advisory information is then distributed in accordance with the user profiles.

Method and apparatus for distributing network security advisory information

A method and apparatus are disclosed whereby databases containing information related to an IP address are accessed directly from within a threat management software tool. When an alert is generated, an element within that alert, such as an IP address, is linked to one or more databases internal to an organization containing information related to the location or identity of a user or computer at a particular IP address. If no matches for that element are found in internal databases, a search of a registry of IP addresses is conducted. Finally, if the searches of internal and external databases are inadequate, an active scan of the device at that particular IP address or a router associated with that IP address is conducted. In this way, information related to a security threat is easily and efficiently obtained to enable a security analyst to better isolate that threat.

Growing community of inventors

Phillipsburg, NJ, United States of America

Stephen Roderick