Attack surface identification
AssigneeZeroFOX, Inc.
InventorsJason Emile Sumpter, James Christopher Foster, Michael Morgan Price
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided to generate an attack surface for a protected entity. The method an include receiving identifying information associated with the protected entity; scanning one or more third parties to identify a host associated with the protected entity; determining that the host resolves to a webpage; resolving the webpage; extracting a uniform resource locator (URL) from the resolved webpage; determining, based on at least one rule, that the URL is associated with the protected entity; and generating the attack surface for the protected entity, the attack surface comprising the URL.
Claims10
A method for generating an attack surface for a protected entity comprising:
- receiving identifying information associated with the protected entity;
- scanning one or more third parties to identify a host associated with the protected entity;
- determining that the host resolves to a webpage;
- resolving the webpage;
- extracting a uniform resource locator (URL) from the resolved webpage;
- determining, based on at least one rule, that the URL is associated with the protected entity;
- generating the attack surface for the protected entity, the attack surface comprising the URL;
- and
- maintaining the generated attack surface on a storage medium;
- and
- monitoring the maintained attack surface to protect the protected entity.
A non-transitory computer-readable medium having instructions stored thereon for execution by a server to implement a method for generating an attack surface for a protected entity, the method comprising the steps of:
- receiving identifying information associated with the protected entity;
- scanning one or more third parties to identify a host associated with the protected entity;
- determining that the host resolves to a webpage;
- resolving the webpage;
- extracting a uniform resource locators (URLs) from the resolved webpage;
- determining, based on at least one rule, that the URL is associated with the protected entity;
- and
- generating the attack surface for the protected entity, the attack surface comprising the URL;
- and
- maintaining the generated attack surface on a storage medium;
- and
- monitoring the maintained attack surface to protect the protected entity.
Dependencies are inferred from the claim text.