Analysis of distributed policy rule-sets for compliance with global policy

David M Nicol (Inventor), William H Sanders (Inventor), Sankalp Singh (Inventor), Mouna Seri (Inventor)

Research output: Patent


A method for analysis of distributed device rule-sets for compliance with global policies includes enabling an administrator to specify a network topology with intercommunicating elements and parameters required to secure the intercommunication with access control elements of the network topology; establishing connections to the access controls elements to capture a snapshot configuration of device rule-sets of the access control elements; enabling the administrator to specify a set of global access constraints with reference to the access control elements; enabling the administrator to select between exhaustive analysis and statistical analysis; conducting the selected analysis to determine violations by the device rule-sets that fail to comply with the set of global access constraints, wherein statistical analysis quantitatively characterizes a level of compliance without conducting analysis of all potential network paths; and providing results of the selected analysis to the administrator through a graphical user interface (GUI) as the results are obtained.
Original languageEnglish (US)
U.S. patent number8209738
StatePublished - Jun 26 2012

Cite this