Multi-Stage Network Scanning with Parallel Interrogation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network scanning technologies are time-consuming and resource-intensive, often requiring bulk scanning before data collection can begin, which limits efficiency and makes it difficult to analyze network changes in real-time, and may incur legal and access issues due to fixed scanning locations.
Innovation Solution
The method and system split the scanning process into distinct stages: preparation, scanning, and collection, allowing for parallel processing and multiple scanning locations, using TCP or UDP to interrogate devices with open port and protocol combinations, and utilizing a queueing service to manage target devices, thereby enabling concurrent processing and reducing resource intensity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If network scanning is performed using traditional bulk scanning methods, then comprehensive network data can be collected, but the process becomes time-consuming and resource-intensive
Solution Approach 1:
The patent divides the network scanning process into multiple stages: initial bulk scanning to identify open ports, followed by targeted interrogation of specific devices. This segmentation allows the system to process large networks efficiently by focusing detailed analysis only on relevant targets, reducing overall time and resource consumption while maintaining comprehensive data collection.
Solution Approach 2:
The patent performs preliminary bulk scanning to identify devices with open ports before conducting detailed interrogation. This preliminary action filters the target set, allowing subsequent focused scanning to proceed faster with fewer resources while still achieving comprehensive coverage of relevant network segments.
2Ease of operation
If network scanning is performed from a fixed location, then scanning operations are simplified, but legal and access issues arise
Solution Approach 1:
The patent transitions from fixed-location scanning to multi-geographic location scanning, adding a spatial dimension to the scanning operation. By distributing scan operations across multiple locations including cloud-based and on-premises systems, the patent improves legal compliance and access reliability while maintaining operational simplicity through automated coordination.
3Measurement precision
If traditional network scanning methods are used, then all devices can be scanned, but the process is resource-intensive and cannot analyze changes in real-time
Solution Approach 1:
The patent performs preliminary scanning to establish a baseline state of network devices, then uses subsequent targeted scanning to detect changes in real-time. This approach enables continuous monitoring without requiring full re-scanning of all devices, achieving both comprehensive detection capability and real-time productivity.
Solution Approach 2:
The patent implements dynamic scanning intervals and target selection based on detected network changes. Instead of static periodic scanning of all devices, the system adapts its scanning behavior to focus resources on devices showing changes, enabling real-time analysis while reducing overall resource consumption.
Data Source
AI summary
Methods and systems for scanning a network. The disclosed methods may involve receiving a list of a plurality of target devices and scanning a first device to determine if a particular port and protocol combination appears to be open on the first device. Upon determining that a particular port and protocol combination appears to be open on the first device, the method involves interrogating the first device before or during scanning of a second device to gather data regarding a service running on the first device.