Tagging Security-Relevant System Objects

摘要

Devices described herein are configured to propagate tags among data objects representing system components. Such devices may detect an event associated with a plurality of system components. Based at least in part on detecting the event and on a configurable policy, the devices may propagate a tag that is assigned to a data object representing one of the plurality of system components to another data object representing another of the plurality of system components. One example of such a tag may be associated with a tree object that represents an execution chain of instances of at least the system component represented by the data object and the other system component represented by the other data object. Another example of such a tag may be a user-specified tag of another entity that the entity associated with the devices subscribes to.

主权项

1. A computer-implemented method comprising:
detecting an event associated with a system component; filtering the event based on a configurable policy; and based at least in part on the detecting and the filtering, assigning a tag to a data object representing the system component.