WO2022010650 DETERMINING APPLICATION ATTACK SURFACE FOR NETWORK APPLICATIONS

Settings

Stemming

Single Family Member

Include NPL

Feedback

Goto Application

Publication Number WO/2022/010650

Publication Date 13.01.2022

International Application No. PCT/US2021/038505

International Filing Date 22.06.2021

IPC

Applicants

CISCO TECHNOLOGY, INC. [US]/[US]

Inventors

RAO, Supreeth Hosur Nagesh
YADAV, Navindra
MALLESHAIAH, Prasannakumar Jobigenahally
PATWARDHAN, Tapan Shrikrishna
ARUMUGAM, Umamaheswaran
PURANDARE, Darshan Shrinath
MA, Aiyesha
LI, Songlin

Agents

MONAJEMI, Babak

Priority Data

16/922,565

07.07.2020

Publication Language English (en)

Filing Language English (EN)

Designated States

View all

Title

(EN) DETERMINING APPLICATION ATTACK SURFACE FOR NETWORK APPLICATIONS

(FR) DÉTERMINATION DE SURFACE D'ATTAQUE D'APPLICATION POUR DES APPLICATIONS DE RÉSEAU

Abstract

(EN) Systems, methods, and computer-readable media for attack surface score computation can include the following processes. An attack surface score service receives information identifying open ports associated with an application. The attack surface score service determines an attack surface score for the application based on the information and common attack ports. A policy engine determines whether to implement a policy for reducing vulnerability of the application to attacks to yield a determination. The policy engine implements a vulnerability reduction policy based on the determination.

(FR) Des systèmes, des procédés et des supports lisibles par ordinateur pour un calcul de score de surface d'attaque peuvent comprendre les procédés suivants. Un service de score de surface d'attaque reçoit des informations identifiant des ports ouverts associés à une application. Le service de score de surface d'attaque détermine un score de surface d'attaque pour l'application sur la base des informations et des ports d'attaque communs. Un moteur de politique détermine s'il faut mettre en œuvre une politique pour réduire la vulnérabilité de l'application à des attaques pour produire une détermination. Le moteur de politique met en œuvre une politique de réduction de vulnérabilité sur la base de la détermination.

H	ELECTRICITY
04	ELECTRIC COMMUNICATION TECHNIQUE
L	TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
29	Arrangements, apparatus, circuits or systems, not covered by a single one of groups H04L1/-H04L27/136
02	Communication control; Communication processing
06	characterised by a protocol

G	PHYSICS
06	COMPUTING; CALCULATING OR COUNTING
F	ELECTRIC DIGITAL DATA PROCESSING
21	Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
50	Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
57	Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

H	ELECTRICITY
04	ELECTRIC COMMUNICATION TECHNIQUE
L	TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
29	Arrangements, apparatus, circuits or systems, not covered by a single one of groups H04L1/-H04L27/136
02	Communication control; Communication processing
06	characterised by a protocol

G	PHYSICS
06	COMPUTING; CALCULATING OR COUNTING
F	ELECTRIC DIGITAL DATA PROCESSING
21	Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
50	Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
57	Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Processing

National Phase Entries

Authority File

Settings

Feedback

Goto Application

1. WO2022010650 - DETERMINING APPLICATION ATTACK SURFACE FOR NETWORK APPLICATIONS