Attack simulation on a test device
AssigneeCisco Technology, Inc.
InventorsMadem Ramanjaneya Devi, Bindiya Vasudevan Syamala, Datthathreya Seetharama
Life of this patent
Estimating the term…
Abstract
Method, system, and/or computer readable medium for simulating attacks on a device including: obtaining one or more attack behaviors from a threat intelligence source; generating an attack using one or more of the attack behaviors and a destination test device; transmitting the generated attack through a data interface to the destination test device; pulling detection data from the destination test device through a management interface; and generating a report that identifies any security gaps in the destination test device.
Claims20
A method for simulating attacks on a device, the method comprising:
- obtaining one or more attack behaviors from a threat intelligence source;
- generating, at an attack simulation system, an attack using the one or more of the attack behaviors and a destination test device, wherein the generated attack is configured to target a vulnerability of an application running on the destination test device, and wherein the destination test device is separate from and external to the attack simulation system;
- transmitting the generated attack through a data interface to the destination test device;
- pulling detection data from the destination test device through a management interface;
- and
- generating a report that identifies any security gaps in the destination test device.
A system comprising:
- a storage configured to store instructions;
- and
- a processor configured to execute the instructions and cause the processor to:
- obtain, at an attack simulation system, one or more attack behaviors from a threat intelligence source;
- generate an attack using the one or more of the attack behaviors and a destination test device, wherein the generated attack is configured to target a vulnerability of an application running on the destination test device, and wherein the destination test device is separate from and external to the system;
- transmit the generated attack through a data interface to the destination test device;
- pull detection data from the destination test device through a management interface;
- and
- generate a report that identifies any security gaps in the destination test device.
A non-transitory computer readable medium comprising instructions, the instructions, when executed by a computing system, cause the computing system to:
- obtain, at an attack simulation system, one or more attack behaviors from a threat intelligence source;
- generate an attack using the one or more of the attack behaviors and a destination test device, wherein the generated attack is configured to target a vulnerability of an application running on the destination test device, and wherein the destination test device is separate from and external to the computing system;
- transmit the generated attack through a data interface to the destination test device;
- pull detection data from the destination test device through a management interface;
- and
- generate a report that identifies any security gaps in the destination test device.
Dependencies are inferred from the claim text.