In an enterprise computing network a number of personal computers, workstations, servers and the like, along with other devices such as mass storage subsystems, internal network interfaces, and external network interfaces, are typically interconnected to provide an integrated environment in which information may be generated, accessed from external sources, and be communicated among various users in some cases. Commonly, users perform a variety of operations including, for example, order receipt, manufacturing, shipping, billing, inventory control, document preparation and management, e-mail, web browsing, and other operations in which creation, access, and communication of data is beneficial.
Malicious software (“malware”) and attacks from hackers can present significant challenges to enterprise security administrators who need to provide a secure environment for their IT (information technology) assets, which typically include both machines and users. Malicious attacks, malware, and other potentially unwanted software can have a tremendous impact on security, reliability, and privacy of IT assets. Attackers are becoming increasingly motivated by financial gain, stealing confidential or personal information, rather than simply vandalizing a client machine. In addition, users can experience serious problems with the stability and performance of their computers, due to the presence of spyware or other forms of unwanted software on their computers. Other vulnerabilities may also exist including, for example, improper configuration of the IT assets, missing updates and patches, and similar issues which can pose additional security risks for an enterprise.
Various tools and security products are available to detect and remove malware threats such as network intrusion detection systems (“NIDs”), server protection products, firewalls, host protection products, and other network protection technologies. However, effectively securing an enterprise environment will typically involve more than detection and removal of specific threats. Client machines must be correctly updated, configured, and managed in order to prevent attacks before they happen. It is important for security administrators to have effective and efficient methods to understand which IT assets are vulnerable or compromised in order to configure them according to security best practices.
This Background is provided to introduce a brief context for the Summary and Detailed Description that follow. This Background is not intended to be an aid in determining the scope of the claimed subject matter nor be viewed as limiting the claimed subject matter to implementations that solve any or all of the disadvantages or problems presented above.