Sudhakar K Govindavajhala

20090276853, Nov 5, 2009

May 2, 2008

12/114040

Sudhakar GOVINDAVAJHALA - Edison NJ, US

MULVAL TECHNOLOGIES, INC. - Edison NJ

G06F 12/14

726 23

Embodiments disclosed herein describe a method to determine consequences of a privilege escalation alert from an intrusion detection system, the method comprising the steps of obtaining privilege escalation alert from the intrusion detection system and analyzing said privilege escalation alert information. The analysis further comprises of identifying the program affected by said privilege escalation alert and determining if it can be circumvented. The users affected by said privilege escalation alert and the transitive effects of said privilege escalation alert are identified.

20090282457, Nov 12, 2009

May 6, 2008

12/115767

Sudhakar Govindavajhala - Edison NJ, US

G06F 21/00
H04L 9/32
G06F 17/00

726 1

A method of representing security information of a host in a universal format, in a manner that is independent of the semantics and implementation details of the underlying operating system is disclosed. The method comprises of the steps of having a security information representation layer to represent security information, the security information representation layer further comprising of representing entity and user privilege security information; representing object security information; representing object dependencies; and representing vulnerability information.

20090271863, Oct 29, 2009

Jan 30, 2007

11/699607

Sudhakar Govindavajhala - Plainsboro NJ, US
Andrew W.s Appel - Princeton NJ, US

G06F 21/00

726 23, 726 25, 726 22

Disclosed herein is a method and system of determining and/or managing potential privilege escalation attacks in a system or network comprising one or more potentially heterogeneous hosts. The step of configuration scanning optionally includes making a list of operating system specific protection mechanism on each host. Vulnerability scanning optionally includes the step of identifying the vulnerability position of each identified program. Transitive closure of all security attacks on the network and potential privilege escalations can be determined. A user interface optionally renders the potential privilege escalations as an appropriate representation. The method may include none or one or more of several pre-emptive mechanisms and reactive mechanisms. Further, the method may optionally include a mechanism for a periodic safety check on the system ensuring continued security on the network.