Hierarchical scanning of internet connected assets
AssigneeExpanse, Inc.
InventorsConnor Leete Gilbert, Michael Haggblade
Life of this patent
Estimating the term…
Abstract
A system for hierarchical scanning includes an interface and a processor. The interface is to receive an indication to scan using a payload; provide the payload to a set of addresses on a set of ports; and receive a set of responses. Each response is associated with an address and a port. The processor is to: for each response of the set of responses: determine whether a follow-up probe exists associated with the response; and in the event the follow-up probe exists associated with the response: execute the follow-up probe on the address and the port associated with the response; and store the set of data received in response to the follow-up probe in a database.
Claims21
-21. (canceled)
A method of operating a hierarchical network scanner comprising:
- scanning, by a network scanning interface, a plurality of network addresses with a network payload probe, the plurality of network addresses ordered in a scanning hierarchy according to a hierarchical list;
- receiving an indication, by the network scanning interface, that a configuration for a first network address has been modified as compared to a prior configuration stored in a network information database of the network scanning interface;
- and
- escalating a hierarchical position of the first network address in the scanning hierarchy in response to said receiving the indication, wherein said escalating causes the scanning by the network payload probe to occur on the first network address earlier than previously scheduled.
A system of operating a hierarchical network scanner comprising:
- a network information database configured to store data associated with any of:
- network addresses;
- network devices;
- network ports;
- or
- any combination thereof;
- a network scanning interface configured to scan a plurality of network addresses with a network payload probe, the plurality of network addresses ordered in a scanning hierarchy according to a hierarchical list, the network scanning interface further configured to receive an indication that a configuration for a first network address has been modified as compared to a prior configuration stored in the network information database;
- and
- a processor;
- and
- a memory including instructions that cause the processor to:
- escalate a hierarchical position of the first network address in the scanning hierarchy in response to receipt of the indication, wherein escalation of the hierarchical position causes the network scanning interface to scan the first network address with the network payload probe earlier than previously scheduled.
A method comprising:
- receiving an indication, by a network scanning interface, that a configuration for a first network address has been modified as compared to a prior configuration stored in a network information database of the network scanning interface;
- escalating a hierarchical position of the first network address in a scanning hierarchy in response to said indication, wherein said escalating causes the scanning by the network payload probe to occur on the first network address earlier than previously scheduled;
- scanning, by a network scanning interface, the first network address with a network payload probe, wherein said scanning is more computationally complex than receiving said indication.
Dependencies are inferred from the claim text.