US 12,118,082 B1Granted

Automated scan engine assignment

AssigneeRapid7, Inc.

InventorsJames Cancilla, Paul Miseiko, Emmett Kelly

Life of this patent

Estimating the term…

Loading patent…

Abstract

Various embodiments include systems and methods of automated scan engine assignment. Responsive to determining to initiate a scan of a target asset, a scan engine assignment strategy may be determined for automatically assigning one or more scan engines to perform the scan. Determining the scan engine assignment strategy may include implementing a strategy selection scheme that defines a hierarchy of scan engine assignment strategies, which may include at least one of a passive discovery strategy, an active discovery strategy, or a scan engine subnet strategy. Using the scan engine assignment strategy, the one or more scan engines may be automatically assigned to perform the scan. The scan may be performed using the one or more scan engines.

Claims20

Dependent claims

A system, comprising:

one or more hardware processors with associated memory that implement automated scan engine assignment, wherein the one or more hardware processors are configured to:
responsive to determining to initiate a scan of a target asset, determine a scan engine assignment strategy for automatically assigning one or more scan engines to perform the scan, wherein, to determine the scan engine assignment strategy, the one or more hardware processors are configured to implement a strategy selection scheme that selects the scan engine assignment strategy from a hierarchy of scan engine assignment strategies according to a following descending order of precedence:
(i) an explicit assignment strategy that utilizes one or more user-specified explicit assignment parameters to determine a particular scan engine of the plurality of scan engines to perform the scan,
(ii) a target binding strategy that utilizes one or more user-specified target binding parameters to determine a particular scan engine of the plurality of scan engines to perform the scan,
(iii) a passive discovery strategy that utilizes reachable target data from a plurality of scan engines to determine the one or more scan engines to perform the scan,
(iv) an active discovery strategy that utilizes output data from the plurality of scan engines to determine the one or more scan engines to perform the scan,
(v) a scan engine subnet strategy that utilizes subnet data to determine which of the plurality of scan engines are capable of scanning the target asset, and
(vi) a random selection strategy that utilizes a random engine assignment scheme to determine the one or more scan engines to perform the scan;
automatically assign, using the scan engine assignment strategy, the one or more scan engines to perform the scan;
and
perform the scan using the one or more scan engines.

8 more elements

A method comprising:

implementing, using one or more hardware processors, automated scan engine assignment, wherein the implementing comprises:
responsive to determining to initiate a scan of a target asset, determining a scan engine assignment strategy for automatically assigning one or more scan engines to perform the scan, wherein determining the scan engine assignment strategy includes implementing a strategy selection scheme that selects the scan engine assignment strategy from a hierarchy of scan engine assignment strategies according to a following descending order of precedence:
(i) an explicit assignment strategy that utilizes one or more user-specified explicit assignment parameters to determine a particular scan engine of the plurality of scan engines to perform the scan,
(ii) a target binding strategy that utilizes one or more user-specified target binding parameters to determine a particular scan engine of the plurality of scan engines to perform the scan,
(iii) a passive discovery strategy that utilizes reachable target data from a plurality of scan engines to determine the one or more scan engines to perform the scan,
(iv) an active discovery strategy that utilizes output data from the plurality of scan engines to determine the one or more scan engines to perform the scan,
(v) a scan engine subnet strategy that utilizes subnet data to determine which of the plurality of scan engines are capable of scanning the target asset, and
(vi) a random selection strategy that utilizes a random engine assignment scheme to determine the one or more scan engines to perform the scan;
automatically assigning, using the scan engine assignment strategy, the one or more scan engines to perform the scan;
and
performing the scan using the one or more scan engines.

8 more elements

One or more non-transitory computer-accessible storage media storing program instructions that, when executed on or across one or more processors, implement at least a portion of a system that implements automated scan engine assignment and cause the system to:

responsive to determining to initiate a scan of a target asset, determine a scan engine assignment strategy for automatically assigning one or more scan engines to perform the scan, wherein, to determine the scan engine assignment strategy, the one or more hardware processors are configured to implement a strategy selection scheme that selects the scan engine assignment strategy from a hierarchy of scan engine assignment strategies according to a following descending order of precedence:
(i) an explicit assignment strategy that utilizes one or more user-specified explicit assignment parameters to determine a particular scan engine of the plurality of scan engines to perform the scan,
(ii) a target binding strategy that utilizes one or more user-specified target binding parameters to determine a particular scan engine of the plurality of scan engines to perform the scan,
(iii) a passive discovery strategy that utilizes reachable target data from a plurality of scan engines to determine the one or more scan engines to perform the scan,
(iv) an active discovery strategy that utilizes output data from the plurality of scan engines to determine the one or more scan engines to perform the scan,
(v) a scan engine subnet strategy that utilizes subnet data to determine which of the plurality of scan engines are capable of scanning the target asset, and
(vi) a random selection strategy that utilizes a random engine assignment scheme to determine the one or more scan engines to perform the scan;
automatically assign, using the scan engine assignment strategy, the one or more scan engines to perform the scan;
and
perform the scan using the one or more scan engines.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/588,413Filed 31 Jan 2022 · continuation in part
Priority: 28 Oct 2021
Granted: 15 Oct 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/554
Detecting local intrusion or implementing counter-measures: involving event detection and direct action
H04L 63/1433
For detecting or protecting against malicious traffic: vulnerability analysis
G06F 9/4887
Scheduling strategies for dispatcher, e.g. round robin, multi-level priority queues: involving deadlines, e.g. rate based, periodic
G06F 9/5022
The resources being hardware resources other than CPUs, Servers and Terminals: mechanisms to release resources

Family

Application17/512,798Parent of this continuation-in-part · filed 28 Oct 2021
Application17/512,795Parent of this continuation-in-part · filed 28 Oct 2021
US 12,095,800 B1Related patent
US 12,255,912 B1Related patent
US 12,118,082 B1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key