EVALUATION NODE FOR REPORTING STATUS VIA A SECURE LINK

摘要

An evaluator node may obtain an IP address within a network to be tested, the network having multiple testable addresses other than the IP address. The evaluator node establishes a secure session to the server, where the evaluator node authenticates itself to the server using a predetermined key. The evaluator node, in response to establishing the secure session, assesses the testable addresses, wherein each of the first testable address and the second testable address are tested according to a pre-set test suite stored in the evaluator node. It reports a summary assessment, to the server, in response to at least one of the testable addresses being assessed. Subsequently, it may, sanitize itself, following receiving responses, detecting timeouts with respect to expected responses. The evaluator node may sanitize by at least erasing from memory at least one summary assessment and the predetermined key.

主权项

1. A computer implemented method for assessing network vulnerability, the computer implemented method comprising:
obtaining an Internet Protocol (IP) address within a network to be tested, the network having at least a first testable address and a second testable address other than the IP address; establishing a secure session to the server, where a client-side computer authenticates itself to the server using a predetermined key; in response to establishing the secure session, assessing the first testable address and the second testable address, wherein each of the first testable address and the second testable address are tested according to a pre-set test suite stored in the client-side computer; normalizing at least one of a response from the first testable address and the second testable address to form a summary assessment, wherein a failure to respond within a preset time is also a response; reporting the summary assessment, to the server, in response to at least one of the first testable address and the second testable address being assessed; in response to completing assessing the first testable address and the second testable address, sanitizing the client-side computer;
wherein sanitizing comprises at least erasing from memory:
at least one summary assessment; andthe predetermined key.