Granted Patent B2

US 12,041,091 · App. 17/245,964 · Granted Jul 16, 2024

Inventors: Alejandro Caceres (Davie, FL); Tomas Fornara (Berlin, DE); Jason Crabtree (Vienna, VA); Richard Kelley (Woodbridge, VA); Andrew Sellers (Monument, CO)

Assignee: QOMPLX LLC

H04L63/20G06F16/2477G06F16/951H04L63/1425H04L63/1441

Abstract

Claims (41)

1. A system for automated Internet-scale vulnerability scanning and enhanced security profiling, comprising:

a cyber-physical graph module comprising a first plurality of programming instructions stored in a memory of, and operating on a processor of, a computing device, wherein the first plurality of programming instructions, when operating on the processor, cause the computing device to create a cyber-physical graph of an organization using information, the cyber-physical graph comprising nodes representing entities associated with the organization and edges representing relationships between the entities associated with the organization;

a reconnaissance engine comprising a second plurality of programming instructions stored in the memory of, and operating on the processor of, the computing device, wherein the second plurality of programming instructions, when operating on the processor, cause the computing device to:

perform a reconnaissance search using the cyber-physical graph; and

apply some or all of the results of the reconnaissance search to the cyber-physical graph to create a cybersecurity profile of the organization; and

a scheduler comprising a third plurality of programming instructions stored in a memory of, and operating on a processor of, a computing device, wherein the third plurality of programming instructions, when operating on the processor, cause the computing device to:

store and maintain a schedule; and

operate a plurality of web crawlers based on the stored schedule, wherein a web crawler:

retrieves a plurality of domains from a database, the plurality of domains being associated with the organization;

requests a web page associated with at least one of the retrieved domains;

receives a response to the request from a web server;

provides input to an interactive element of the web page;

receives a result from the web server, the result being based on the provided input;

indexes the result; and

store the indexed results from the plurality of web crawlers; and

a scoring engine comprising a fourth plurality of programming instructions stored in the memory of, and operating on the processor of, the computing device, wherein the fourth plurality of programming instructions, when operating on the processor, cause the computing device to:

receive the cybersecurity profile and the reconnaissance search results;

retrieve the indexed results;

using the cyber-physical graph and the indexed results:

identify a plurality of cybersecurity risks associated with the organization, the cybersecurity risks being based on the indexed results;

determine a business impact for each cybersecurity risk identified;

assign a network resilience rating to the organization; and

determine a functional cybersecurity score for the organization based at least on the network resilience rating.

2. The system of claim 1 , wherein the input is generated by a fuzzer.

3. A method for automated Internet-scale vulnerability scanning and enhanced security profiling, comprising the steps of:

creating a cyber-physical graph of an organization using entities associated with the organization and relationships between the entities associated with the organization, the cyber-physical graph comprising nodes representing the entities associated with the organization and edges representing the relationships between the entities associated with the organization;

performing a reconnaissance search using the cyber-physical graph;

applying some or all of the results of the reconnaissance search to the cyber-physical graph to create a cybersecurity profile of the organization;

storing and maintaining a schedule; and

operating a plurality of web crawlers based on the stored schedule, wherein a web crawler:

retrieves a plurality of domains from a database, the plurality of domains being associated with the organization;

requests a web page associated with at least one of the retrieved domains;

receives a response to the request from a web server; provides input to an interactive element of the web page;

receives a result from the web server, the result being based on the provided input; indexes the result; and

storing the indexed results from the plurality of web crawlers; and

using the cyber-physical graph and the indexed results:

identify a plurality of cybersecurity risks associated with the organization, the cybersecurity risks being based on the indexed results;

determine a business impact for each cybersecurity risk identified;

assign a network resilience rating to the organization; and

determine a functional cybersecurity score for the organization based at least on the network resilience rating.

4. The method of claim 3 , wherein the input is generated by a fuzzer.

Assignments (6)

Continuity (17)

Cited By (1)

US 12,348,535