Method and system for simulating a hacking attack on a network

Abstract

The present invention describes a method for simulating a hacking attack on a Network, wherein the Network comprises at least one of a plurality of data processing units (DPUs), a plurality of users and a plurality of communication links, to assess vulnerabilities of the Network. The method includes receiving one or more scan parameters for the Network. Further, the method includes creating at least one master agent by a system to gather information about the Network, wherein the information pertains to critical and non-critical information about the Network. The method includes creating an Information Model and then incrementally updating the Information Model during the hacking attack. The Information Model is the abstract representation of information collected by the system. Furthermore, the method includes generating a Multiple Attack Vector (MAV) graph based on one or more scan parameters and the Information Model. MAV has the ability to combine plurality of low and medium severity vulnerabilities associated with the data processing units (DPUs), users and communication links, correlate vulnerabilities in combination with Information Model and generate high severity attack paths that can lead to compromise of the Network. Moreover, the method includes launching one or more attacks based on the MAV graph to compromise the Network. The method further includes installing atleast one slave agent on the compromised Network to perform the one or more attacks in a distributed manner. Moreover, the method includes performing a multi stage attack by using the at least one slave agent and the at least one master agent by repeating above steps. Finally, the method includes generating a report by the scan controller, wherein the report contains details about the compromisedNetwork and the vulnerabilities of the Network.

Description

technical field [0001] The invention disclosed herein relates generally to the field of data processing unit (DPU) security, and more specifically, to vulnerability assessment of DPU networks. Background technique [0002] Due to the widespread use of networks, corporate offices, and business solutions, we need robust security in the field of network communications, and for this reason, network security has received enormous attention in the past few years. Network communications and e-commerce introduce new threats to organizations through viruses, Trojan horses, spam senders (SPAM) senders, intruders, and more. The network refers to a public network such as the Internet and a private network such as an intranet. Cybersecurity includes all activities of an organization to protect information or data in terms of integrity, confidentiality, authentication, access control, etc. Security measures are used to guard against untrustworthy external sources such as Internet users ...

AI Technical Summary

Problems solved by technology

[0007] Although the existing methods provide the ability to automatically exploit and make threats on one or more DPUs (hosts) in the network, manual intervention is still required in the process of collecting relevant information and the vulnerability of the network. Manually orchestrate the attack, then manually launch the attack to gain access to the DPU

Therefore, automatically orchestrated attacks still cannot be found in existing methods

[0008] There is no prior art describing non-human intervention or automatic methods, systems and computer program products to allow integration of different methods, systems and computer programs, correlation of their results, planning of exploitation and automatic execution of penetration testing, and there is no manual intervention

[0009] Finally, there is no prior art describing non-human intervention or automated methods, systems and computer program products to perform penetration detection of a DPU network, including communication links in the network and users operating on the DPU (host)

Images