发明授权
- 专利标题： Systems and methods for determining characteristics of a network and analyzing vulnerabilities
- 专利标题（中）： 确定网络特征并分析漏洞的系统和方法
-
申请号： US10843353申请日： 2004-05-12
-
公开(公告)号： US07716742B1公开(公告)日： 2010-05-11
- 发明人: Martin Roesch , William Andrew Vogel, III , Matt Watchinski
- 申请人： Martin Roesch , William Andrew Vogel, III , Matt Watchinski
- 申请人地址： US MD Columbia
- 专利权人： Sourcefire, Inc.
- 当前专利权人： Sourcefire, Inc.
- 当前专利权人地址： US MD Columbia
- 代理机构： Posz Law Group, PLC
- 主分类号： G06F12/14
- IPC分类号： G06F12/14
摘要：
A packet transmitted on a network is read and decoded. A network device and its operating system are identified by analyzing the decoded packet. If more than one operating system is identified from the decoded packet, the operating system is selecting by comparing confidence values assigned to the operating systems identified. A service running on the network device is identified from the decoded packet or subsequent packets that are read, decoded and analyzed. The network topology of a network is determined by reading, decoding, and analyzing a plurality of packets. A flow between two network devices is determined by reading, decoding, and analyzing a plurality of packets. Vulnerabilities are assigned to operating systems and services identified by reading, decoding, and analyzing packets. Network configuration policy is enforced on operating systems and services identified by reading, decoding, and analyzing packets.
信息查询
