AUTOMATED NETWORK INTERFACE ATTACK RESPONSE

摘要

An attack upon a web interface is detected in real-time. The web interface is one of many web interfaces across many ports across many computer systems within a network. Data on the attack is gathered. The attack data includes traffic data. Variants of the attack are determined based on data of the attack. The variants are selected from a predetermined set of attack variants. The attacked interface is scanned with the selected attack variants. The web interface is identified as vulnerable to at least one variant of the attack. In response to this identification, the attack is responded to without human intervention.

主权项

1. A method of scanning for security threats, the method comprising:
detecting, in real-time, an attack on a web interface of a computing system having a plurality of web interfaces; gathering data on the attack; determining variants of the attack based on data of the attack, wherein the variants are a subset of a predetermined set of attack variants; scanning, based on the attack, the web interface with the variants of the attack; determining vulnerability of the web interface to the variants of the attack; and responding to the attack without human intervention based on the determined vulnerability of the web interface to the variants of the attack.