Back to results
US 9,177,113 B2Granted
Methods and systems for automated network scanning in dynamic virtualized environments
AssigneeZynga Inc.
InventorsKevin McGinley, Rich Tener
Life of this patent
Estimating the term…
Abstract
Systems and methods for managing jobs to be scanned based on existence of processing nodes are described. One of the methods includes obtaining identification information regarding operation of a first set of the processing nodes from an inventory and creating a job for scanning the processing nodes of the first set for security vulnerability. The job includes the identification information. The method further includes verifying the inventory to determine the first identifying information of the first set of processing nodes for removal from the job and loading the job having second identifying information for a second set of processing nodes that remain after the verifying operation.
Claims17
A method comprising:
- loading a job into a vulnerability scanner node, the job including identification information regarding a number of nodes of a cloud network, the nodes in a non-terminated state at a time the job is loaded into the vulnerability scanner node for performing a vulnerability scan,
- wherein the cloud network includes a network of the nodes to provide computing and storage resources to devices connected to the Internet;
- determining whether a state of at least one of the nodes changed from being non-terminated to terminated based on a change in the identification information, wherein determining whether the state of the at least one of the nodes changed is performed during the vulnerability scan;
- receiving report data including a number of outcomes of the vulnerability scan of the nodes from the vulnerability scanner node;
- removing from the report data at least one of the outcomes associated with the at least one of the nodes in response to determining that the state of the at least one of the nodes changed from being non-terminated to terminated,
- wherein removing from the report data is performed to generate updated report data;
- and
- providing the updated report data for display of the report data.
5 more elements
A system comprising:
- a memory device for storing a job loader module;
- and
- a processor coupled to the memory device, the processor for executing the job loader module for:
- loading a job into a vulnerability scanner node, the job including identification information regarding a number of nodes of a cloud network, the nodes in a non-terminated state at a time the job is loaded into the vulnerability scanner node, wherein the cloud network includes a network of the nodes to provide computing and storage resources to devices connected to the Internet;
- receiving report data including a number of outcomes of a vulnerability scan of the nodes from the vulnerability scanner node;
- determining between a time at which the job is loaded into the vulnerability scanner node and a time at which the report data is received whether a state of at least one of the nodes changed from being non-terminated to terminated;
- and
- removing from the report data at least one of the outcomes associated with the at least one of the nodes in response to determining that the state of the at least one of the nodes changed from being non-terminated to terminated,
- wherein removing from the report data is performed to generate updated report data,
- wherein the processor is configured to provide the updated report data for rendering on a display device.
7 more elements
A method comprising:
- loading a job for a vulnerability scan, wherein the job includes identifying information for a set of processing nodes;
- identifying information regarding one or more of the processing nodes that were terminated during the vulnerability scan, wherein identifying the information regarding the one or more of the processing nodes is performed during the vulnerability scan;
- receiving scanning results of the vulnerability scan for the loaded job;
- and
- removing results associated with the one or more of the processing nodes that were terminated during the vulnerability scan,
- wherein removing results associated with the one or more of the processing nodes includes removing from the scanning results the information identifying the one or more of the processing nodes that were terminated during the vulnerability scan.
3 more elements
Dependencies are inferred from the claim text.