Systems, methods, and devices for detecting security vulnerabilities in IP networks

A method of detecting and alerting on possible compromise of an internet protocol (IP) network having one more IP devices, comprising:

• detecting at least one potential denial of service attack as a first set of vulnerability events;
• detecting at least one potential unauthorized usage attempt as a second set of vulnerability events;
• detecting at least one potential spoofing attack as a third set of vulnerability events, wherein the detecting of the at least one potential spoofing attack comprises watermarking of data streams of the IP devices;
• analyzing the first set of vulnerability events, the second set of vulnerability events, and the third set of vulnerability events weighted according to attribute data representing information about an importance of the IP devices that generated the events;
• and
• sending one or more alerts based on the analysis performed in the analyzing step,
• wherein the attribute data comprises quality of data produced by the IP devices, age of the IP devices, time since last maintenance of the IP devices, integrity of the IP devices, and reliability of the IP devices.

A system for detecting and alerting on possible compromise of an internet protocol (IP) network having one or more IP devices, the system comprising:

• a vulnerability detection engine configured to detect one or more vulnerabilities in the IP network;
• an analysis engine configured to analyze two or more vulnerabilities weighted according to attribute data representing information about an importance of the IP device, wherein the analysis engine is further configured to correlate the vulnerabilities across time and space;
• and
• an action engine configured to perform one or more actions based on the correlation performed by the analysis engine,
• wherein the attribute data comprises quality of data produced by the IP devices, age of the IP devices, time since last maintenance of the IP devices, integrity of the IP devices, and reliability of the IP devices.