Bobby E Williams

US Patent:

6907531, Jun 14, 2005

Filed:

Jun 30, 2000

Appl. No.:

09/608282

Inventors:

Timothy D. Dodd - Tucker GA, US
Scott Mewett - Holloways Beach, AU
Curtis E. Ide - Roswell GA, US
Kevin A. Overcash - Atlanta GA, US
David A. Dennerline - Atlanta GA, US
Bobby J. Williams - Atlanta GA, US
Martin D. Sells - Canton GA, US

Assignee:

Internet Security Systems, Inc. - Atlanta GA

International Classification:

G06F011/30
G06F012/14
G06F015/16
H04L001/00
H04L009/00

US Classification:

713201, 713165, 709224

Abstract:

A method and system identifies, fixes, and updates security vulnerabilities in a host computer or host computers. The present invention can communicate between a scanner with plug-in capability, an operating system, and an express update package. The architectural set-up can allow exploits within the scanner and exploits in the express update package to function with no knowledge of each other. The user also needs no knowledge of whether the exploits are within the scanner or the express update package. Mutual authentication procedures can enable the scanner to load only legitimate express update packages, and can provide that express update packages can only be loaded into legitimate scanners.