Attack surface identification
Systems and methods are provided to generate an attack surface for a protected entity. The method an include receiving identifying information associated with the protected entity; scanning one or more third parties to identify a host associated with the protected entity; determining that the host resolves to a webpage; resolving the webpage; extracting a uniform resource locator (URL) from the resolved webpage; determining, based on at least one rule, that the URL is associated with the protected entity; and generating the attack surface for the protected entity, the attack surface comprising the URL.
1. A method for generating an attack surface for a protected entity comprising:
receiving identifying information associated with the protected entity;
scanning one or more third parties to identify a host associated with the protected entity;
determining that the host resolves to a webpage;
resolving the webpage;
extracting a uniform resource locator (URL) from the resolved webpage;
determining, based on at least one rule, that the URL is associated with the protected entity;
generating the attack surface for the protected entity, the attack surface comprising the URL; and
maintaining the generated attack surface on a storage medium; and
monitoring the maintained attack surface to protect the protected entity.
2. The method of claim 1 , wherein extracting the URL comprises crawling the resolved webpage.
3. The method of claim 1 , wherein extracting the URL comprises scraping the resolved webpage.
4. The method of claim 1 comprising:
determining that a social media account from the URL is associated with the protected entity; and
modifying the attack surface for the protected entity to include the social media account.
5. The method of claim 1 , wherein determining, based on the at least one rule, that the URL is associated with the protected entity comprises determining that the URL is associated with GitHub.
6. A non-transitory computer-readable medium having instructions stored thereon for execution by a server to implement a method for generating an attack surface for a protected entity, the method comprising the steps of:
receiving identifying information associated with the protected entity;
scanning one or more third parties to identify a host associated with the protected entity;
determining that the host resolves to a webpage;
resolving the webpage;
extracting a uniform resource locators (URLs) from the resolved webpage;
determining, based on at least one rule, that the URL is associated with the protected entity; and
generating the attack surface for the protected entity, the attack surface comprising the URL; and
maintaining the generated attack surface on a storage medium; and
monitoring the maintained attack surface to protect the protected entity.
7. The non-transitory computer-readable medium of claim 6 , wherein extracting the URL comprises crawling the resolved webpage.
8. The non-transitory computer-readable medium of claim 6 , wherein extracting the URL comprises scraping the resolved webpage.
9. The non-transitory computer-readable medium of claim 6 , wherein the method further comprises:
determining that a social media account from the URL is associated with the protected entity; and
modifying the attack surface for the protected entity to include the social media account.
10. The non-transitory computer-readable medium of claim 6 , wherein determining, based on the at least one rule, that the URL is associated with the protected entity comprises determining that the URL is associated with GitHub.