CA2473444A1 - Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau - Google Patents

Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau Download PDF

Info

Publication number
CA2473444A1
CA2473444A1 CA002473444A CA2473444A CA2473444A1 CA 2473444 A1 CA2473444 A1 CA 2473444A1 CA 002473444 A CA002473444 A CA 002473444A CA 2473444 A CA2473444 A CA 2473444A CA 2473444 A1 CA2473444 A1 CA 2473444A1
Authority
CA
Canada
Prior art keywords
target
vulnerabilities
target network
identification
assessment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CA002473444A
Other languages
English (en)
Other versions
CA2473444C (fr
Inventor
Stuart C. Mcclure
George Kurtz
Robin Keir
Marshall A. Beddoe
Michael J. Morton
Christopher M. Prosise
David M. Cole
Christopher Abad
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
McAfee LLC
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Publication of CA2473444A1 publication Critical patent/CA2473444A1/fr
Application granted granted Critical
Publication of CA2473444C publication Critical patent/CA2473444C/fr
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1433—Vulnerability analysis
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/50—Testing arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227—Filtering policies
CA002473444A 2002-01-15 2002-01-15 Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau Expired - Lifetime CA2473444C (fr)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/US2002/001093 WO2003060717A1 (fr) 2002-01-15 2002-01-15 Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau

Publications (2)

Publication Number Publication Date
CA2473444A1 true CA2473444A1 (fr) 2003-07-24
CA2473444C CA2473444C (fr) 2009-09-08

Family

ID=21743216

Family Applications (1)

Application Number Title Priority Date Filing Date
CA002473444A Expired - Lifetime CA2473444C (fr) 2002-01-15 2002-01-15 Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau

Country Status (6)

Country Link
EP (1) EP1466248A1 (fr)
JP (1) JP2005515541A (fr)
CN (1) CN1623140A (fr)
AU (1) AU2002245262B2 (fr)
CA (1) CA2473444C (fr)
WO (1) WO2003060717A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112364355A (zh) * 2020-11-12 2021-02-12 中国石油天然气集团有限公司 主动发现分布式自建系统与扫描安全漏洞的方法
CN116866055A (zh) * 2023-07-26 2023-10-10 中科驭数（北京）科技有限公司 数据泛洪攻击的防御方法、装置、设备及介质

Families Citing this family (35)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7664845B2 (en) 2002-01-15 2010-02-16 Mcafee, Inc. System and method for network vulnerability detection and reporting
US7243148B2 (en) 2002-01-15 2007-07-10 Mcafee, Inc. System and method for network vulnerability detection and reporting
US8091117B2 (en) 2003-02-14 2012-01-03 Preventsys, Inc. System and method for interfacing with heterogeneous network data gathering tools
US8984644B2 (en) 2003-07-01 2015-03-17 Securityprofiling, Llc Anti-vulnerability system, method, and computer program product
US20070113272A2 (en) 2003-07-01 2007-05-17 Securityprofiling, Inc. Real-time vulnerability monitoring
US9100431B2 (en) 2003-07-01 2015-08-04 Securityprofiling, Llc Computer program product and apparatus for multi-path remediation
CN1886935B (zh) * 2003-11-28 2014-05-14 迈克菲爱尔兰控股有限公司 用于收集有关通信网络的信息和用于收集有关在通信网络节点上运行的操作系统的信息的方法和系统
WO2006026262A2 (fr) * 2004-08-28 2006-03-09 Streamaware, Llc Procede et systeme d'analyse de liaison
US7793338B1 (en) 2004-10-21 2010-09-07 Mcafee, Inc. System and method of network endpoint security
CN100429890C (zh) * 2005-09-05 2008-10-29 北京启明星辰信息技术有限公司 网络安全事件的可视化定位方法及系统
US7748042B2 (en) * 2006-09-14 2010-06-29 Genpact Limited Security vulnerability determination in a computer system
GB2443459A (en) * 2006-10-31 2008-05-07 Hewlett Packard Development Co Data packet incuding computing platform indication
WO2009037897A1 (fr) 2007-09-20 2009-03-26 Nec Corporation Système de gestion des opérations de sécurité, procédé de gestion des opérations de sécurité et programme de gestion des opérations de sécurité
CN101447991B (zh) * 2008-11-19 2012-10-24 中国人民解放军信息安全测评认证中心 用于测试入侵检测系统的测试装置及测试方法
CN101447898B (zh) * 2008-11-19 2012-12-05 中国人民解放军信息安全测评认证中心 一种用于网络安全产品的测试系统及测试方法
JP5598112B2 (ja) * 2009-06-22 2014-10-01 横河電機株式会社 プラントにおけるセキュリティ脅威レポートを作成する方法及びシステム
RU2657170C2 (ru) * 2010-07-01 2018-06-08 Онапсис, Инк. Автоматизированная оценка безопасности критически важных для бизнеса компьютерных систем и ресурсов
CN102104605B (zh) * 2011-02-28 2013-06-26 中国人民解放军国防科学技术大学 一种面向大规模网络脆弱性关联分析的梯度化并行方法
JP2011155706A (ja) * 2011-05-16 2011-08-11 Fujitsu Ltd オペレーティングシステムの判定が可能な装置及び方法
US8819818B2 (en) 2012-02-09 2014-08-26 Harris Corporation Dynamic computer network with variable identity parameters
CN104426850A (zh) * 2013-08-23 2015-03-18 南京理工大学常熟研究院有限公司 基于插件的漏洞检测方法
US10162969B2 (en) * 2014-09-10 2018-12-25 Honeywell International Inc. Dynamic quantification of cyber-security risks in a control system
US9349246B1 (en) * 2014-09-15 2016-05-24 Skillz Inc. Integrations portal for a peer-to-peer game platform
JP6515597B2 (ja) 2015-03-09 2019-05-22 富士通株式会社 管理プログラム、管理方法、管理装置
JP2016177371A (ja) * 2015-03-18 2016-10-06 株式会社富士通エフサス 監視装置、監視プログラムおよび監視方法
CN104852921A (zh) * 2015-05-25 2015-08-19 烽火通信科技股份有限公司 网络设备防开放端口攻击测试系统及方法
WO2018031951A1 (fr) * 2016-08-11 2018-02-15 Hopzero, Inc. Procédé et système pour limiter la gamme de transmissions de données
CA3093021A1 (fr) 2018-03-05 2019-09-12 EzoTech Inc. Systeme et procede d'essai de securite automatise
US11108805B2 (en) * 2018-06-27 2021-08-31 Amazon Technologies, Inc. Automated packetless network reachability analysis
JP2020201533A (ja) * 2019-06-05 2020-12-17 富士通株式会社 不正中継監査プログラム、不正中継監査方法および不正中継監査システム
CN110377518B (zh) * 2019-07-17 2023-07-25 招商银行股份有限公司 全流程扫描方法、装置、设备及可读存储介质
US11716343B2 (en) 2020-08-11 2023-08-01 Cisco Technology, Inc. Secure neighborhoods assessment in enterprise networks
US11848956B2 (en) 2021-04-26 2023-12-19 Orca Security LTD. Systems and methods for disparate risk information aggregation
CN113595823B (zh) * 2021-07-26 2024-02-13 哈尔滨工业大学（威海） 基于解析行为的开放域名解析器节能程度评估的方法
CN116520882B (zh) * 2023-04-28 2024-02-06 北京交通大学 一种面向无人机系统的配置缺陷分析方法和系统

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH09214493A (ja) * 1996-02-08 1997-08-15 Hitachi Ltd ネットワークシステム
US5892903A (en) * 1996-09-12 1999-04-06 Internet Security Systems, Inc. Method and apparatus for detecting and identifying security vulnerabilities in an open network computer communication system
US6298445B1 (en) * 1998-04-30 2001-10-02 Netect, Ltd. Computer security
US6282546B1 (en) * 1998-06-30 2001-08-28 Cisco Technology, Inc. System and method for real-time insertion of data into a multi-dimensional database for network intrusion detection and vulnerability assessment

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112364355A (zh) * 2020-11-12 2021-02-12 中国石油天然气集团有限公司 主动发现分布式自建系统与扫描安全漏洞的方法
CN112364355B (zh) * 2020-11-12 2024-03-29 中国石油天然气集团有限公司 主动发现分布式自建系统与扫描安全漏洞的方法
CN116866055A (zh) * 2023-07-26 2023-10-10 中科驭数（北京）科技有限公司 数据泛洪攻击的防御方法、装置、设备及介质
CN116866055B (zh) * 2023-07-26 2024-02-27 中科驭数（北京）科技有限公司 数据泛洪攻击的防御方法、装置、设备及介质

Also Published As

Publication number Publication date
JP2005515541A (ja) 2005-05-26
AU2002245262B2 (en) 2007-03-15
AU2002245262A1 (en) 2003-07-30
CA2473444C (fr) 2009-09-08
EP1466248A1 (fr) 2004-10-13
CN1623140A (zh) 2005-06-01
WO2003060717A1 (fr) 2003-07-24

Similar Documents

Publication Publication Date Title
CA2473444A1 (fr) Procede et systeme permettant de detecter et de rapporter la vulnerabilite d'un reseau
CN109525558B (zh) 数据泄露检测方法、系统、装置及存储介质
Manoharan et al. Revolutionizing Cybersecurity: Unleashing the Power of Artificial Intelligence and Machine Learning for Next-Generation Threat Detection
KR100955281B1 (ko) 위협 관리를 위한 보안 위험도 평가 방법
Bai et al. Intrusion detection systems: technology and development
US8839430B2 (en) Intrusion detection in communication networks
Dickerson et al. Fuzzy intrusion detection
Cunningham et al. Evaluating intrusion detection systems without attacking your friends: The 1998 DARPA intrusion detection evaluation
CN108809951A (zh) 一种适用于工业控制系统的渗透测试框架
Paudel et al. Detecting dos attack in smart home iot devices using a graph-based approach
US10462170B1 (en) Systems and methods for log and snort synchronized threat detection
WO2003067405A3 (fr) Test automatise contre la menace a la securite de pages web
Maglaras et al. Threats, protection and attribution of cyber attacks on critical infrastructures
Maglaras et al. Threats, countermeasures and attribution of cyber attacks on critical infrastructures
CN112217800B (zh) 一种蜜罐识别方法、系统、装置及介质
CN105488393A (zh) 一种基于数据库蜜罐的攻击行为意图分类方法及系统
Suma Automatic spotting of sceptical activity with visualization using elastic cluster for network traffic in educational campus
CN114157484A (zh) 一种基于云计算的数据安全存储系统
Colbert et al. A process-oriented intrusion detection method for industrial control systems
Lee et al. Multi-stage intrusion detection system using hidden markov model algorithm
CN106973051A (zh) 建立检测网络威胁模型的方法、装置、存储介质和处理器
CN112153081A (zh) 一种工业网络异常状态的检测方法
CN109729084A (zh) 一种基于区块链技术的网络安全事件检测方法
Xiao et al. Alert verification based on attack classification in collaborative intrusion detection
US11038921B1 (en) Detecting malicious actors

Legal Events

Date Code Title Description
EEER Examination request