CA2473444A1 - Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau - Google Patents

Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau Download PDF

Info

Publication number
CA2473444A1
CA2473444A1 CA002473444A CA2473444A CA2473444A1 CA 2473444 A1 CA2473444 A1 CA 2473444A1 CA 002473444 A CA002473444 A CA 002473444A CA 2473444 A CA2473444 A CA 2473444A CA 2473444 A1 CA2473444 A1 CA 2473444A1
Authority
CA
Canada
Prior art keywords
target
vulnerabilities
target network
identification
assessment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CA002473444A
Other languages
English (en)
Other versions
CA2473444C (fr
Inventor
Stuart C. Mcclure
George Kurtz
Robin Keir
Marshall A. Beddoe
Michael J. Morton
Christopher M. Prosise
David M. Cole
Christopher Abad
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
McAfee LLC
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Publication of CA2473444A1 publication Critical patent/CA2473444A1/fr
Application granted granted Critical
Publication of CA2473444C publication Critical patent/CA2473444C/fr
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1433—Vulnerability analysis
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/50—Testing arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
CA002473444A 2002-01-15 2002-01-15 Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau Expired - Lifetime CA2473444C (fr)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/US2002/001093 WO2003060717A1 (fr) 2002-01-15 2002-01-15 Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau

Publications (2)

Publication Number Publication Date
CA2473444A1 true CA2473444A1 (fr) 2003-07-24
CA2473444C CA2473444C (fr) 2009-09-08

Family

ID=21743216

Family Applications (1)

Application Number Title Priority Date Filing Date
CA002473444A Expired - Lifetime CA2473444C (fr) 2002-01-15 2002-01-15 Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau

Country Status (6)

Country Link
EP (1) EP1466248A1 (fr)
JP (1) JP2005515541A (fr)
CN (1) CN1623140A (fr)
AU (1) AU2002245262B2 (fr)
CA (1) CA2473444C (fr)
WO (1) WO2003060717A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112364355A (zh) * 2020-11-12 2021-02-12 中国石油天然气集团有限公司 主动发现分布式自建系统与扫描安全漏洞的方法
CN116866055A (zh) * 2023-07-26 2023-10-10 中科驭数（北京）科技有限公司 数据泛洪攻击的防御方法、装置、设备及介质

Families Citing this family (37)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7664845B2 (en) 2002-01-15 2010-02-16 Mcafee, Inc. System and method for network vulnerability detection and reporting
US7243148B2 (en) 2002-01-15 2007-07-10 Mcafee, Inc. System and method for network vulnerability detection and reporting
WO2004075006A2 (fr) 2003-02-14 2004-09-02 Preventsys, Inc. Systeme d'assurance de politiques de verification de reseau
US8984644B2 (en) 2003-07-01 2015-03-17 Securityprofiling, Llc Anti-vulnerability system, method, and computer program product
US20070113272A2 (en) 2003-07-01 2007-05-17 Securityprofiling, Inc. Real-time vulnerability monitoring
US9100431B2 (en) 2003-07-01 2015-08-04 Securityprofiling, Llc Computer program product and apparatus for multi-path remediation
EP2372954B1 (fr) * 2003-11-28 2014-01-08 Insightix Ltd Procédé et système pour collecter d'informations rélatives à un réseau de communication
CA2580753A1 (fr) * 2004-08-28 2006-03-09 Streamaware, Llc Procede et systeme d'analyse de liaison
US7793338B1 (en) 2004-10-21 2010-09-07 Mcafee, Inc. System and method of network endpoint security
CN100429890C (zh) * 2005-09-05 2008-10-29 北京启明星辰信息技术有限公司 网络安全事件的可视化定位方法及系统
US7748042B2 (en) * 2006-09-14 2010-06-29 Genpact Limited Security vulnerability determination in a computer system
GB2443459A (en) * 2006-10-31 2008-05-07 Hewlett Packard Development Co Data packet incuding computing platform indication
US8484729B2 (en) 2007-09-20 2013-07-09 Nec Corporation Security operation management system, security operation management method, and security operation management program
CN101447898B (zh) * 2008-11-19 2012-12-05 中国人民解放军信息安全测评认证中心 一种用于网络安全产品的测试系统及测试方法
CN101447991B (zh) * 2008-11-19 2012-10-24 中国人民解放军信息安全测评认证中心 用于测试入侵检测系统的测试装置及测试方法
JP5598112B2 (ja) * 2009-06-22 2014-10-01 横河電機株式会社 プラントにおけるセキュリティ脅威レポートを作成する方法及びシステム
CA2803241C (fr) 2010-07-01 2016-08-09 Mariano Nunez Di Croce Estimation de securite automatisee d'applications et de systemes commerciaux critiques
CN102104605B (zh) * 2011-02-28 2013-06-26 中国人民解放军国防科学技术大学 一种面向大规模网络脆弱性关联分析的梯度化并行方法
JP2011155706A (ja) * 2011-05-16 2011-08-11 Fujitsu Ltd オペレーティングシステムの判定が可能な装置及び方法
US8819818B2 (en) 2012-02-09 2014-08-26 Harris Corporation Dynamic computer network with variable identity parameters
CN104426850A (zh) * 2013-08-23 2015-03-18 南京理工大学常熟研究院有限公司 基于插件的漏洞检测方法
US10162969B2 (en) * 2014-09-10 2018-12-25 Honeywell International Inc. Dynamic quantification of cyber-security risks in a control system
US9349246B1 (en) * 2014-09-15 2016-05-24 Skillz Inc. Integrations portal for a peer-to-peer game platform
JP6515597B2 (ja) 2015-03-09 2019-05-22 富士通株式会社 管理プログラム、管理方法、管理装置
JP2016177371A (ja) * 2015-03-18 2016-10-06 株式会社富士通エフサス 監視装置、監視プログラムおよび監視方法
CN104852921A (zh) * 2015-05-25 2015-08-19 烽火通信科技股份有限公司 网络设备防开放端口攻击测试系统及方法
WO2018031951A1 (fr) * 2016-08-11 2018-02-15 Hopzero, Inc. Procédé et système pour limiter la gamme de transmissions de données
EP3762851A4 (fr) 2018-03-05 2021-11-10 Ezotech Inc. Système et procédé d'essai de sécurité automatisé
US12603912B2 (en) 2018-03-05 2026-04-14 EzoTech Inc. Automated security testing system and method
US11108805B2 (en) * 2018-06-27 2021-08-31 Amazon Technologies, Inc. Automated packetless network reachability analysis
JP2020201533A (ja) * 2019-06-05 2020-12-17 富士通株式会社 不正中継監査プログラム、不正中継監査方法および不正中継監査システム
CN110377518B (zh) * 2019-07-17 2023-07-25 招商银行股份有限公司 全流程扫描方法、装置、设备及可读存储介质
US11716343B2 (en) 2020-08-11 2023-08-01 Cisco Technology, Inc. Secure neighborhoods assessment in enterprise networks
US11627154B2 (en) 2021-04-26 2023-04-11 Orca Security LTD. Forward and rearward facing attack vector visualization
CN113595823B (zh) * 2021-07-26 2024-02-13 哈尔滨工业大学（威海） 基于解析行为的开放域名解析器节能程度评估的方法
CN114935923B (zh) * 2022-06-09 2025-03-14 南京南自华盾数字技术有限公司 一种基于树莓派的新能源边缘工业控制系统漏洞检测方法
CN116520882B (zh) * 2023-04-28 2024-02-06 北京交通大学 一种面向无人机系统的配置缺陷分析方法和系统

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH09214493A (ja) * 1996-02-08 1997-08-15 Hitachi Ltd ネットワークシステム
US5892903A (en) * 1996-09-12 1999-04-06 Internet Security Systems, Inc. Method and apparatus for detecting and identifying security vulnerabilities in an open network computer communication system
US6298445B1 (en) * 1998-04-30 2001-10-02 Netect, Ltd. Computer security
US6282546B1 (en) * 1998-06-30 2001-08-28 Cisco Technology, Inc. System and method for real-time insertion of data into a multi-dimensional database for network intrusion detection and vulnerability assessment

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112364355A (zh) * 2020-11-12 2021-02-12 中国石油天然气集团有限公司 主动发现分布式自建系统与扫描安全漏洞的方法
CN112364355B (zh) * 2020-11-12 2024-03-29 中国石油天然气集团有限公司 主动发现分布式自建系统与扫描安全漏洞的方法
CN116866055A (zh) * 2023-07-26 2023-10-10 中科驭数（北京）科技有限公司 数据泛洪攻击的防御方法、装置、设备及介质
CN116866055B (zh) * 2023-07-26 2024-02-27 中科驭数（北京）科技有限公司 数据泛洪攻击的防御方法、装置、设备及介质

Also Published As

Publication number Publication date
AU2002245262A1 (en) 2003-07-30
EP1466248A1 (fr) 2004-10-13
WO2003060717A1 (fr) 2003-07-24
CA2473444C (fr) 2009-09-08
AU2002245262B2 (en) 2007-03-15
CN1623140A (zh) 2005-06-01
JP2005515541A (ja) 2005-05-26

Similar Documents

Publication Publication Date Title
Manoharan et al. Revolutionizing cybersecurity: Unleashing the power of artificial intelligence and machine learning for next-generation threat detection
Maglaras et al. Threats, protection and attribution of cyber attacks on critical infrastructures
CN109525558B (zh) 数据泄露检测方法、系统、装置及存储介质
Bai et al. Intrusion detection systems: technology and development
Paudel et al. Detecting DoS attack in smart home IoT devices using a graph-based approach
KR100955281B1 (ko) 위협 관리를 위한 보안 위험도 평가 방법
US8839430B2 (en) Intrusion detection in communication networks
Dickerson et al. Fuzzy intrusion detection
Cunningham et al. Evaluating intrusion detection systems without attacking your friends: The 1998 DARPA intrusion detection evaluation
US10462170B1 (en) Systems and methods for log and snort synchronized threat detection
CN108809951A (zh) 一种适用于工业控制系统的渗透测试框架
WO2006044835A3 (fr) Procede, systeme et appareil permettant d'evaluer la vulnerabilite de services web
WO2003067405A3 (fr) Test automatise contre la menace a la securite de pages web
CN111200575B (zh) 一种基于机器学习的信息系统恶意行为的识别方法
CN114157484A (zh) 一种基于云计算的数据安全存储系统
CN112153081A (zh) 一种工业网络异常状态的检测方法
CN117527297A (zh) 一种基于域名的网络安全检测系统
CN119995996A (zh) 基于网络协议分析的数字信息安全传输系统及方法
Colbert et al. A process-oriented intrusion detection method for industrial control systems
CN105227540A (zh) 一种事件触发式的mtd防护系统及方法
CN115987532A (zh) 一种基于无监督图嵌入的apt横向移动攻击检测系统及方法
Barabas et al. Behavioral signature generation using shadow honeypot
Xiao et al. Alert verification based on attack classification in collaborative intrusion detection
US20090276853A1 (en) Filtering intrusion detection system events on a single host
US11038921B1 (en) Detecting malicious actors

Legal Events

Date Code Title Description
EEER Examination request