Network Vulnerability Assessment via Port Scanning and Device Classification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current vulnerability assessment methods for computerized devices connected to communication networks are inadequate in detecting and prioritizing vulnerabilities across various device types, as they often rely on manual processes and lack efficient automated systems for scanning and identifying open ports and associated device types.

Innovation Solution

A method and system utilizing a discovery system that scans IP addresses, detects open ports, identifies device types, and assesses vulnerability levels by sending request headers, extracting response headers, and utilizing preconfigured data structures to classify devices and perform vulnerability tests, generating detailed reports on vulnerability levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If manual vulnerability assessment processes are used, then assessment accuracy may be maintained, but productivity is reduced and time consumption increases

Engineering Contradiction:

Improvevulnerability assessment speedVSAvoidtime for vulnerability detection

Core Design Contradiction:

ProductivityVSLoss of time

Solution Approach 1:

The system enables automated self-assessment of vulnerabilities by having devices report their own configuration information and security status through standardized protocols, eliminating the need for manual assessment while maintaining comprehensive coverage

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system performs preliminary scanning and identification of potential vulnerabilities before actual security threats can exploit them, using pre-configured assessment protocols to proactively detect open ports, services, and configuration weaknesses

Inventive Principle:

Principle #10Preliminary action

2Productivity

If automated scanning systems are implemented, then productivity increases, but device complexity increases and false positives may occur

Engineering Contradiction:

Improveautomated vulnerability detection capabilityVSAvoidsystem complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The automated assessment system is divided into modular components including separate scanning modules, analysis modules, and reporting modules that can operate independently and be selectively deployed based on specific assessment needs, reducing overall system complexity

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A standardized intermediary protocol layer is introduced between the scanning system and target devices, providing a uniform interface that simplifies complex device-specific assessments into standardized data formats for easier processing and analysis

Inventive Principle:

Principle #24Intermediary (Mediator)

3Measurement precision

If comprehensive vulnerability assessment is performed across all device types, then measurement precision improves, but device complexity and assessment difficulty increase

Engineering Contradiction:

Improvevulnerability detection accuracyVSAvoiddevice type identification difficulty

Core Design Contradiction:

Measurement precisionVSDifficulty of detecting and measuring

Solution Approach 1:

The assessment system applies device-type-specific assessment protocols and criteria tailored to each device category (e.g., cameras, routers, switches, workstations), optimizing detection accuracy for each device type while maintaining a unified overall assessment framework

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system dynamically adjusts assessment parameters such as scanning depth, protocol selection, and vulnerability criteria based on identified device types, transforming the assessment process to match the specific characteristics and security requirements of each device category

Inventive Principle:

Principle #35Parameter changes

4Measurement precision

If agents are deployed on target devices for assessment, then measurement precision improves, but ease of operation decreases and device complexity increases

Engineering Contradiction:

Improvecommunication assessment accuracyVSAvoiddeployment complexity

Core Design Contradiction:

Measurement precisionVSEase of operation

Solution Approach 1:

A universal agent platform is developed that can function across multiple device types and assessment scenarios, providing consistent communication and data collection capabilities whether deployed on cameras, routers, switches, or workstations, thereby simplifying deployment while maintaining precision

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12081578B2Method and system for identifying vulnerability levels in devices operated on a given network

Publication Date: 2024.09.03 HAYMAN MEIR

AI summary

The present invention discloses a method operable by a discovery system comprising at least one computerized device connected to an internet-protocol based network, the computerized device configured to operate a scan on a range of internet-protocol addresses and detect open ports available for communication. The discovery system is configured to generate an open port list denoted as first open port list of the open ports available for communication in the given range of the internet-protocol addresses and send request headers over an application protocol to at least one port of the ports in the first open port list and receive response headers comprising header fields from open ports available for communication in the range of internet-protocol addresses. The discovery system may be configured to utilize the header fields in a preconfigured data structure to identify device types, associate a test reference to the device type and preform the test accordingly to communicate with the identified open ports and determine vulnerability levels according to the test results.