RPC port mapper integrity checker to improve security of a provisionable network
View Patent ↗A method for verifying port integrity in a network, comprising: accessing port binding information in a port authorization file in the network, querying a port mapper in the network for a mapped port assignment, comparing the port assignment to the port binding, and initiating a response based on the results of the comparing.
1. A method for verifying port mapping integrity in a network, comprising:
accessing, performed by a computer system, port binding information, which includes an identification and an authorized port of an authorized service, in a port authorization file in said network;
querying a port mapper for a mapped port assignment, which was created when an application registered a service provided by the application with said port mapper at the time said application was brought up, said mapped port assignment includes a current port used by said registered service;
determining if an identified service is currently using said authorized port by comparing said mapped port assignment to said port binding information; and
initiating a response to said comparing.
2. The method described in claim 1 wherein said network comprises a utility data center.
3. The method described in claim 1 wherein said mapped port assignment comprises static port binding data.
4. The method described in claim 1 wherein said port authorization file comprises fixed port assignments.
5. The method described in claim 1 wherein said port authorization file is generated upon network initialization.
6. The method described in claim 1 wherein said response comprises an alarm.
7. The method described in claim 1 wherein said response comprises a system lockdown.
8. In a network comprising a plurality of network port connections, a network port map verification tool, comprising:
a port assignment file, stored in an electronic device, comprising a port authorization, which includes an authorized port of an authorized service, in said network; and
a port assignment file verifier wherein said verifier is enabled to verify a port assignment against said port authorization by,
querying a port mapper for a mapped port assignment, which was created when an application registered a service provided by the application with said port mapper at the time said application was brought up, said mapped port assignment includes a current port used by said registered service;
determining if an identified service is currently using said authorized port by comparing said mapped port assignment to said port authorization; and
initiating a response to said comparing.
9. The network port map verification tool described in claim 8 , wherein said network comprises a utility data center.
10. The network port map verification tool described in claim 9 , wherein said network port map verification tool is further enabled to initiate a response to a port assignment anomaly.
11. The network port map verification tool described in claim 10 , wherein said response is an alarm.
12. The network port map verification tool described in claim 10 , wherein said response is a system lockdown.
13. The network port map verification tool described in claim 9 , wherein said network port map verification tool is enabled to verify a digital signature related to said port authorization.
14. The network port map verification tool described in claim 9 , wherein said network port map verification tool is enabled to operate in a remote procedure call environment.
15. A system for protecting network security, comprising:
a network server coupled to a network;
a network client communicatively coupled with said network server via a port;
a plurality of provisionable services enabled to communicate with said server via a plurality of ports; and
a port map verification tool enabled to compare a port assignment to a port authorization, which includes an authorized port of an authorized service, in said network by,
querying a port mapper for a mapped port assignment, which was created when an application registered a service provided by the application with said port mapper at the time said application was brought up, said mapped port assignment includes a current port used by said registered service;
determining if an identified service is currently using said authorized port by comparing said mapped port assignment to said port authorization; and
initiating a response to said comparing.
16. The system for protecting network security described in claim 15 wherein said network comprises a utility data center.
17. The system for protecting network security described in claim 15 , wherein said port map verification tool is enabled to initiate a response to a port assignment anomaly.
18. The system for protecting network security described in claim 17 , wherein said response can be an alarm.
19. The system for protecting network security described in claim 17 , wherein said response can be a system lockdown.
20. The system for protecting network security described in claim 17 , wherein said port map verification tool is enabled to operate in a remote procedure call environment.