	US 11,902,313 B2
	Dynamic hierarchical tagging system and method
Sean M. Molloy, Parker, CO (US); Terry Ramos, Vacaville, CA (US); and Sumedh Shrinand Thakar, San Jose, CA (US)
Assigned to Qualys, Inc., Foster City, CA (US)
Filed by Qualys, Inc., Foster City, CA (US)
Filed on May 14, 2021, as Appl. No. 17/321,185.
Application 17/321,185 is a continuation of application No. 15/478,096, filed on Apr. 3, 2017, granted, now 11,012,460.
Application 15/478,096 is a continuation of application No. 13/272,189, filed on Oct. 12, 2011, granted, now 9,613,099, issued on Apr. 4, 2017.
Claims priority of provisional application 61/392,324, filed on Oct. 12, 2010.
Prior Publication US 2021/0273972 A1, Sep. 2, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01); G06Q 10/087 (2023.01); H04L 67/10 (2022.01)

CPC H04L 63/1433 (2013.01) [G06Q 10/087 (2013.01); H04L 67/10 (2013.01)]

19 Claims

1. A computing apparatus comprising:

at least one memory comprising instructions; and

at least one processing device configured for executing the instructions that, when executed, cause the at least one processing device to perform the operations of:

receiving raw scan data in response to conducting a scan of an enterprise network;

identifying a plurality of assets in communication with the enterprise network using the raw scan data;

determining whether a previous scan of the enterprise network was a first authenticated scan or a first non-authenticated scan, wherein the previous scan was executed before the scan;

determining whether the scan of the enterprise network is a second authenticated scan or a second non-authenticated scan;

determining a first scan authoritativeness of the scan of the enterprise network;

determining a second scan authoritativeness of the previous scan of the enterprise network;

comparing the first scan authoritativeness of the scan of the enterprise network with the second scan authoritativeness of the previous scan of the enterprise network;

formatting the raw scan data, based on comparing the first scan authoritativeness of the scan of the enterprise network with the second scan authoritativeness of the previous scan of the enterprise network, wherein the formatting the raw scan data comprises modifying the raw scan data;

evaluating the formatted scan data to determine that a tag applies to an asset comprised in the plurality of assets, wherein the tag is assigned to the asset in the at least one memory; and

generating a target list of assets to be scanned in a subsequent scan of the enterprise network, wherein the target list of assets is a subset of the plurality of assets, wherein the computing apparatus is at least partially controlled using a web application.