Back to results
US 2013/0174263 A1Published application
Automated security assessment of business-critical systems and applications
AssigneeMariano Nunez Di Croce
InventorMariano Nunez Di Croce
Life of this patent
Estimating the term…
Abstract
Systems and methods which provide a new application security assessment framework that allows auditing and testing systems to automatically perform security and compliance audits, detect technical security vulnerabilities, and illustrate the associated security risks affecting business-critical applications.
Claims15
A method for assessing a security configuration of a target computer system, the method comprising:
- a) scanning previously provided IP addresses and ports;
- b) fingerprinting detected open ports to identify underlying services for said open ports;
- c) detecting if said target system is active
- d) accessing a database of modules and executing at least one of said modules, said modules being for determining security vulnerabilities accessible through said IP addresses and ports wherein
- said at least one module is executed based on a configuration of said module;
- said target computer system is for executing business-critical applications.
3 more elements
A system for automatically testing at least one target computer system for security vulnerabilities, the system comprising:
- a core engine subsystem for storing data related to said security vulnerabilities and configurations for at least one target computer system or network of computer systems;
- at least one scan engine subsystem in communication with said core engine subsystem, said scan engine subsystem comprising:
- a system identifier subcomponent for determining resources of said at least one target computer system;
- a plurality of testing and probing modules for automatically testing resources of said at least one target computer system and for determining a vulnerability of said resources;
- an intelligent dispatch subcomponent for launching at least one of said testing and probing modules based on a configuration of said module;
- wherein said at least one target computer system executes business-critical applications.
3 more elements
Dependencies are inferred from the claim text.