Method and system for detection and avoidance of weaknesses in a network connected device
A method and a system for identifying a weakness in a first device that is arranged in a first network, including transmission of a first message to a second device, wherein the second device is arranged in a second network outside the first network, including reception and evaluation of the first message by the second device for the purpose of providing a piece of identification information for the first device in the first network, including composition and transmission of a second message to the first device by the piece of identification information by the second device and including display of a weakness by the first device or second device if the second message is received by the first device. The method and a system can be used to check a secure network and/or device configuration in the industrial and private sectors.
1. A method for detecting a weakness of a first device which is disposed in a first network, the method comprising:
a) transmitting, by the first device, a first message to a second device, wherein the second device is disposed in a second network outside the first network, wherein the first device tests a plurality of transmission protocols and transmits the first message using at least one transmission protocol from the tested plurality of transmission protocols, and wherein the transmitting of the first message using the at least one transmission protocol from the test plurality of transmission protocols indicates a possible weakness of the first device;
b) receiving and evaluating the first message by the second device for the provision of identification information of the first device in the first network;
c) creating and transmitting a second message to the first device by means of the identification information by the second device; and
d) indicating a weakness by the first device or second device if the second message is received by the first device.
2. The method as claimed in claim 1 , wherein a network address which is allocated to the first message as the sender address is assigned to the identification information.
3. The method as claimed in claim 1 , wherein the second message is generated and transmitted using the at least one transmission protocol from the plurality of transmission protocols.
4. The method as claimed in claim 1 , wherein an activation of a device-specific functionality of the first device is signaled by the second message, and the first device reveals its weakness by indicating a device-specific functionality activated by the second message.
5. A system for detecting a weakness with a first device which is disposed in a first network, and a second device which is disposed in a second network outside the first network, wherein the first device and the second device are configured to:
a) transmit a first message to the second device by the first device, wherein the first device tests a plurality of transmission protocols and transmits the first message using at least one transmission protocol from the tested plurality of transmission protocols, and wherein the transmitting of the first message using the at least one transmission protocol from the test plurality of transmission protocols indicates a possible weakness of the first device;
b) receive and evaluate the first message by the second device for the provision of identification information of the first device in the first network;
c) create and transmit a second message to the first device by means of the identification information by the second device; and
d) indicate a weakness by the first device or second device if the second message is receivable by the first device.
6. The system as claimed in claim 5 , wherein a network address which is allocated to the first message as the sender address is assignable to the identification information.
7. The system as claimed in claim 5 , wherein the second message can be generated and transmitted using the at least one transmission protocol from the plurality of transmission protocols.
8. The system as claimed in claim 5 , wherein an activation of a device-specific functionality of the first device can be signaled by the second message, and the first device reveals its weakness by indicating a device-specific functionality activated by the second message.