Brian Howard Hajost

US Patent:

20120066287, Mar 15, 2012

Filed:

Sep 11, 2010

Appl. No.:

12/880072

Inventors:

Brian H. Hajost - Great Falls VA, US

International Classification:

G06F 15/16

US Classification:

709203

Abstract:

Embodiments of the present invention provide a method, system and computer program product for mobile application deployment in a distributed computing environment. In an embodiment of the invention, a method for mobile application deployment in a distributed computing environment is provided. The method includes uploading a mobile application into a central mobile application repository and modifying a distribution policy for other mobile applications in the central mobile application repository to account for the uploaded mobile application. Thereafter, both the distribution policy and the uploaded mobile application can be transmitted to a distributed application repository coupled to an intermediate server charged with synchronizing messages, calendaring and contacts with wirelessly linked pervasive mobile devices and an associated messaging server. Finally, the intermediate server selectively deploys the uploaded mobile application to different coupled mobile devices from the distributed application repository according to the distribution policy.

US Patent:

20140040990, Feb 6, 2014

Filed:

Aug 4, 2012

Appl. No.:

13/567011

Inventors:

Bao Nguyen - Ashburn VA, US
Fredi Jaramillo - Ashburn VA, US
Brian H. Hajost - Ashburn VA, US

Assignee:

SteelCloud, Inc. - Ashburn VA

International Classification:

G06F 21/00

US Classification:

726 4

Abstract:

Embodiments of the present invention provide a method, system, and computer program product apparatus for validating a computer environment. In an embodiment of the invention, a signature file denoting the infrastructure requirements of a computing environment to support a computer program to be installed in the computer environment of multiple different computing devices disposed in multiple different network domains can be loaded. Administrative network privileges to access the multiple different network domains in the computing environment can be acquired. Further, at least one deficiency in the infrastructure requirements corresponding to one of the network domains can be identified and the identified deficiency can be remediated. The identified deficiency can be reported.

US Patent:

20210350002, Nov 11, 2021

Filed:

May 7, 2020

Appl. No.:

16/869548

Inventors:

- Ashburn VA, US
Brian H. Hajost - Great Falls VA, US

International Classification:

G06F 21/57

Abstract:

Guard-railed security benchmark compliance assurance includes storing in memory of a computer a multiplicity of specific parameter values, retrieving from memory, different parameterized operating system directives arranged together in a programmatic module, populating different parameters of the directives with respective ones of the stored specific parameter values and invoking each of the directives with the populated different parameters through a command line shell of an operating system executing in the computer, each invocation establishing a different configuration setting in a computing environment hosted by the computer.

US Patent:

20210352112, Nov 11, 2021

Filed:

May 7, 2020

Appl. No.:

16/869576

Inventors:

- Ashburn VA, US
Brian H. Hajost - Great Falls VA, US

International Classification:

H04L 29/06
H04L 12/24

Abstract:

A method for migrating security benchmark compliance content from a source platform to a target platform includes filtering a set of configuration parameters in a source platform to a subset of configuration parameters, each of the parameters corresponding to a respectively different entry in a security checklist of a security benchmark. Then, a listing is presented in a user interface of each of the configuration parameters and for each configuration parameter, a corresponding entry in the security checklist regulating the configuration parameter according to a range of values. Finally, the configuration parameters in the subset are applied to a target platform excepting for at least one of the configuration parameters. Instead, alternative value within the range is received as input in the user interface and is applied to the target platform in lieu of the at least one of the configuration parameters.

US Patent:

20190199754, Jun 27, 2019

Filed:

Dec 27, 2017

Appl. No.:

15/854992

Inventors:

- Ashburn VA, US
Brian H. Hajost - Great Falls VA, US

International Classification:

H04L 29/06
G06F 11/14

Abstract:

Embodiments of the present invention provide for a method, system, and apparatus for processing content during scan and/or remediation processing. The method includes receiving a scan request or a remediation request. Content from a datastore referencing one or more controls as well as one or more of a compliance value, remediation value, and an ignore switch corresponding to each control is then loaded. If a scan request is received, the computing environment is scanned to determine all controls in the computing environment and the current setting of each. Thereafter, a subset of controls is determined, where the current setting of each control in the subset is out of compliance, the out of compliance state for each control is not to be ignored, and a remediation value for the corresponding control is listed in the loaded content. Thereafter, information regarding each control is determined, captured, and then stored.

US Patent:

20180083998, Mar 22, 2018

Filed:

Nov 28, 2017

Appl. No.:

15/824272

Inventors:

- Ashburn VA, US
Fredi Jaramillo - Ashburn VA, US
Brian H. Hajost - Great Falls VA, US

Assignee:

SteelCloud, LLC - Ashburn VA

International Classification:

H04L 29/06
H04L 12/24
H04L 29/08
G06F 9/445
G06F 9/44

Abstract:

Embodiments of the present invention provide a method, system, and computer program product for debugging a computer environment. In an embodiment of the invention, an anomaly is detected in a computing environment of multiple different computing devices disposed in multiple different network domains. Thereafter, administrative network privileges to access the multiple different network domains are acquired and existing resources in the computing environment are identified. Additionally, a signature file is loaded into a memory of the computer, where the signature file denotes infrastructure requirements of the computing environment, and the existing resources and the infrastructure requirements denoted in the signature file are compared to determine whether a disparity exists between the existing resources and the infrastructure requirements. Upon determining that the disparity exists between the existing resources and the infrastructure requirements a configuration of the computing environment of the multiple different computing devices is adjusted to fix the disparity.

US Patent:

20170177316, Jun 22, 2017

Filed:

Mar 6, 2017

Appl. No.:

15/450164

Inventors:

- Ashburn VA, US
Brian H. Hajost - Great Falls VA, US

International Classification:

G06F 9/445
G06F 21/51
G06F 9/44
H04L 29/06

Abstract:

Embodiments of the present invention provide a method, system, and computer program product for ensuring the veracity of a mobile application for deployment in a distributed computing environment. In an embodiment of the invention, a method for ensuring the veracity of a mobile application for deployment in a distributed computing environment is provided. The method includes detecting a mobile application being uploaded for deployment to a mobile computing device in the distributed computing environment, creating and then storing a fingerprint for the uploaded mobile application, calculating an offset value according to the fingerprint for the uploaded mobile application, and storing the offset value for the uploaded mobile application. The method further includes, prior to deploying the uploaded mobile application to the mobile computing device, validating the offset value for the uploaded mobile application to determine that the uploaded mobile application is an unaltered version of the uploaded mobile application.

US Patent:

20160212164, Jul 21, 2016

Filed:

Mar 29, 2016

Appl. No.:

15/083700

Inventors:

- Ashburn VA, US
Fredi Jaramillo - Ashburn VA, US
Brian H. Hajost - Ashburn VA, US

Assignee:

SteelCloud, LLC - Ashburn VA

International Classification:

H04L 29/06

Abstract:

Embodiments of the present invention provide a method, system, and computer program product for debugging a computer environment. In an embodiment of the invention, an anomaly is detected in a computing environment of multiple different computing devices disposed in multiple different network domains. Thereafter, administrative network privileges to access the multiple different network domains are acquired and existing resources in the computing environment are identified. Additionally, a signature file is loaded into a memory of the computer, where the signature file denotes infrastructure requirements of the computing environment, and the existing resources and the infrastructure requirements denoted in the signature file are compared to determine whether a disparity exists between the existing resources and the infrastructure requirements. Upon determining that the disparity exists between the existing resources and the infrastructure requirements a configuration of the computing environment of the multiple different computing devices is adjusted to fix the disparity.