System and method for a security asset manager
View Patent ↗Implementations of the present disclosure involve a system and/or method of performing security asset management. The system and/or method may schedule vulnerability scanners to scan the various portions of one or more networks and obtain the results of the vulnerability scans. IP addresses may be assigned to each of vulnerability scanners to scan. The system obtains the results of the vulnerability scans and may adjust the results of the scans according to configuration of the one or more networks that an IP address is associated with. The system and/or method may also assign and reassign IP addresses amongst the scanners to optimize scanning speed.
1. A security asset management system comprising:
a computing device including a processor coupled to a memory, the memory storing instructions for execution on the processor, the instructions configured to cause the processor to:
direct a first vulnerability scanner to perform a first vulnerability scan on a first plurality of IP addresses on a first network to identify a first vulnerability of a first computing device operating using one of the first plurality of IP addresses;
receive a first result for the first vulnerability scan, the first result including a first severity rating assigned by the first vulnerability scanner for the first vulnerability;
direct a second vulnerability scanner to perform a second vulnerability scan on a second plurality of IP addresses on a second network to identify a second vulnerability of a second computing device operating using one of the second plurality of IP addresses;
receive a second result for the second vulnerability scan, the second result including a second severity rating assigned by the second vulnerability scanner for the second vulnerability;
adjust the first severity rating according to at least one network configuration associated with the first network; and
adjust the second severity rating according to at least one network configuration associated with the second network.
2. The system of claim 1 , wherein the at least one IP address comprises each IP address in a subnet of a network and a block of IP addresses in the network.
3. The system of claim 1 , wherein the at least one network configuration associated with the first network comprises at least one of an accessibility of the first network from the Internet, a function of the first network, and a data stored on the first network.
4. A method of performing security asset management comprising:
obtaining, at a computing device comprising a processor coupled to a memory, a first set of results of a first vulnerability scan on a first plurality of IP addresses on a first network from a first vulnerability scanner, wherein the first set of results include a first vulnerability and a first severity rating assigned by the first vulnerability scanner for the first vulnerability;
obtaining, at the computing device, a second set of results of a second vulnerability scan on a second plurality of IP addresses on a second network from a second vulnerability scanner, wherein the second set of results include a second vulnerability and a second severity rating assigned by the second vulnerability scanner for the second vulnerability;
adjusting the first severity rating according to at least one network configuration associated with the first network using the computing device; and
adjusting the second severity rating according to at least one network configuration associated with the second network using the computing device.
5. The method of claim 4 , wherein the at least one IP address comprises each IP address in a subnet of a network and a block of IP address in the network.
6. The system of claim 4 , wherein the at least one network configuration associated with the first network comprises at least one of an accessibility of the first network from the Internet, a function of the first network, and a data stored on the first network.
7. A system for security asset manager comprising:
a computing device including a processor coupled to a memory, the memory storing instructions for execution on the processor, the instructions configured to cause the processor to:
direct a first plurality of vulnerability scanners to perform a first vulnerability scan on a first plurality of IP addresses on a first network to identify a first vulnerability of a first computing device operating using one of the first plurality of IP addresses;
receive a first result for the first vulnerability scan, the first result including a first severity rating assigned by at least one of the first plurality of vulnerability scanners for the first vulnerability;
direct a second plurality of vulnerability scanners to perform a second vulnerability scan on a second plurality of IP addresses on a second network to identify a second vulnerability of a second computing device operating using one of the second plurality of IP addresses;
receive a second result for the second vulnerability scan, the second result including a second severity rating assigned by at least one of the second plurality of vulnerability scanners for the second vulnerability;
adjust the first severity rating according to at least one network configuration associated with the first network; and
adjust the second severity rating according to at least one network configuration associated with the second network.