Back to results
US 9,544,324 B2Granted
System and method for managed security assessment and mitigation
AssigneeTrustwave Holdings, Inc.
InventorScott Parcel
Life of this patent
Estimating the term…
Abstract
In an embodiment of the invention, a system for assessing vulnerabilities includes: a security management system; a network device in a system under test (SUT), wherein the network device is privy to traffic in the SUT; and wherein the SMS is privy to traffic that is known by the network device and/or to one or more traffic observations that is known by the network device.
Claims15
A system for security management, the system comprising:
- a security management system (SMS) that is outside a system under test (SUT);
- and
- a network device in the SUT to:
- transmit traffic information in the SUT to the SMS at a first time, wherein the traffic information includes a captured request, the SMS to transmit the captured request to an application program interface (API) of a server, separate from the network device, in the SUT at a second time later than the first time, and
- in response to the SMS sending the captured request to the API:
- capture traffic between the server and another device, separate from the server and the network device, in the system under test, the traffic sent by the server in response to the captured request received via the API, and
- transmit the traffic to the SMS, the SMS to scan the traffic for vulnerabilities, wherein the SUT includes a firewall configured to filter traffic from the SMS to devices in the SUT and to block the captured request when the captured request is transmitted to the server by a device outside the SMS, the network device configured to at least one of set up tunneling for the SMS, alter communications output from the SUT, or perform a fault injection in the captured request transmitted by the SMS.
4 more elements
A method in a network device, the method comprising:
- transmitting traffic information in a system under test (SUT) to a security management system (SMS) at a first time, wherein the traffic information includes a captured request;
- and
- in response to detecting that the SMS sends the captured request to an application program interface of a server, separate from the network device, in the SUT at a second time after the first time:
- capturing traffic between the server and another device, separate from the server and the network device, in the system under test, the traffic sent by the server in response to the captured request received via the API, and
- transmitting the traffic to the SMS for scanning for vulnerabilities, wherein the SUT includes a firewall configured to filter traffic from the SMS to devices in the SUT and to block the captured request when the captured request is transmitted to the server by a device outside the SMS, the network device configured to at least one of set up tunneling for the SMS, alter communications output from the SUT, or perform a fault injection in the captured request transmitted by the SMS.
2 more elements
A tangible computer readable storage disk or storage device medium comprising instructions that, when executed, cause a network device to at least:
- transmit traffic information in a system under test (SUT) to a security management system (SMS) at a first time, wherein the traffic information includes a captured request;
- and
- in response to detecting that the SMS sends the captured request to an application program interface of a server, separate from the network device, in the SUT at a second time after the first time:
- capture traffic between the server and another device, separate from the server and the network device, in the system under test, the traffic sent by the server in response to the captured request received via the API, and
- transmit the traffic to the SMS for scanning for vulnerabilities, wherein the SUT includes a firewall configured to filter traffic from the SMS to devices in the SUT and to block the captured request when the captured request is transmitted to the server by a device outside the SMS, the network device configured to at least one of set up tunneling for the SMS, alter communications output from the SUT, or perform a fault injection in the captured request transmitted by the SMS.
2 more elements
Dependencies are inferred from the claim text.