Risk analysis using port scanning for multi-factor authentication
A system for risk analysis using port scanning for multi-factor authentication having a multi-dimensional time series data server configured to monitor and record a network's traffic data and to serve the traffic data to other modules and a directed computational graph module configured to scan open ports on connection destinations, analyze the scan results, and determine a verification score needed before granting access based at least in part on the analysis of the received responses. A plurality of verification methods build up a user's verification score to required level to gain access.
1. A system for risk analysis using port scanning for multi-factor authentication, comprising:
a multi-dimensional time series data server comprising a memory, a processor, and a plurality of programming instructions stored in the memory thereof and operable on the processor thereof, wherein the programmable instructions, when operating on the processor, cause the processor to:
monitor and store a network's traffic data; and
serve traffic data to other modules; and
a directed computational graph module comprising a memory, a processor, and a plurality of programming instructions stored in the memory thereof and operable on the processor thereof, wherein the programmable instructions, when operating on the processor, cause the processor to:
receive traffic data from the multi-dimensional time series data server;
identify a connection attempt from a user device to a destination device with unknown risk potential;
scan a plurality of network ports at the destination device;
analyze the scan results to determine at least a plurality of open ports at the destination device and a plurality of closed ports at the destination device; and
determine a required verification score for granting access to a network resource based at least in part on the open and closed ports on the destination device;
wherein a plurality of verification methods is used to build up a user's verification score to the required verification score in order for the user to gain access to the destination device.
2. The system of claim 1 , wherein the verification score is based at least in part on stored knowledge of the user.
3. The system of claim 2 , wherein the stored knowledge of the user comprises at least knowledge of user access privileges to resources on the local network.
4. The system of claim 1 , wherein at least a portion of the verification methods verifies visual media pertaining to the user.
5. The system of claim 1 , wherein at least a portion of the verification methods checks and verifies biometric features of the user.
6. The system of claim 1 , wherein at least a portion of the verification methods used are based on information obtained from untrusted parties.
7. The system of claim 1 , wherein at least a portion of the verification methods used are based on information pertaining to the user device.
8. A method for risk analysis using port scanning for multi-factor authentication, comprising the steps of:
(a) using a computing device with a processor and a memory, monitoring and recording a network's traffic data for the purpose of providing a stateful, evolving baseline of authentication patterns, with a multi-dimensional time series data server;
(b) serving the traffic data to other modules, with the multi-dimensional time series data server;
(c) receiving the traffic data from the multi-dimensional time series data server, at a directed computation graph module;
(d) identifying a connection attempt from a user device to a destination device with unknown risk potential;
(e) scanning a plurality of network ports at the destination device;
(f) analyzing the scan results to determine at least a plurality of open ports at the destination device and a plurality of closed ports at the destination device; and
(g) determining a required verification score for granting access to a network resource based at least in part on the open and closed ports on the destination device; and
(h) requiring user of the user device to use a plurality of verification methods to earn enough verification score in order to gain access to the destination device.
9. The method of claim 8 , wherein the verification score is based at least in part on stored knowledge of the user.
10. The method of claim 9 , wherein the stored knowledge of the user comprises at least knowledge of user access privileges to resources on the local network.
11. The method of claim 8 , wherein at least a portion of the verification methods verifies visual media pertaining to the user.
12. The method of claim 8 , wherein at least a portion of the verification methods checks and verifies biometric features of the user.
13. The method of claim 8 , wherein at least a portion of the verification methods used are based on information obtained from untrusted parties.
14. The method of claim 8 , wherein at least a portion of the verification methods used are based on information pertaining to the user device.