Systems and Methods for Improved Network Vulnerability Scanning and Reporting

Abstract

Vulnerability scanning systems and methods are provided for automatically performing the steps necessary for compliance testing and auditing of an organization's systems, and determining security posture in real time. A Machine-in-the-Middle Microserviced Security Engine (MiMMSE) is provided that provides one-way traffic for command execution and security improvement, management for automating services in OS containers, the elimination of multiple connections to services per client to give users more control of network access, total data destruction after each run to reduce attack surfaces, encryption over container services, reverse tunnel or VPN traffic between pods, clusters, and other separated networks, and machine learning (e.g., neural-network-based) maps for command execution order.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS[0001]This application claims priority to U.S. Provisional Patent Application No. 63 / 144,382, filed Feb. 1, 2021, the entire contents of which are hereby incorporated by reference.TECHNICAL FIELD[0002]The present invention relates, generally, to network and computer security and, more particularly, to automated vulnerability scanning and reporting.BACKGROUND[0003]Cybersecurity incidents—i.e., events that threaten the confidentiality, integrity, and / or availability of an organization's assets—have increased dramatically in recent years, posing a significant financial and competitive risk. This has driven a similar increase in the need for vulnerability scanning and reporting. Unfortunately, privacy and information security has traditionally depended, to a large extent, on human experts and information technology (IT) professionals, who in turn may largely rely on non-rigorous and / or subjective assessments.[0004]Furthermore, an increasing number ...

Images