Protecting end point devices

摘要

An approach is provided for protecting endpoint devices against unauthorized network connections. An endpoint device to be protected initiates a security test by requesting that a security detection service attempt to establish a network connection with the endpoint device. The endpoint device receives, from the security detection service, a response to the request sent to the security detection service. The security detection service attempts to establish a connection with the endpoint device. If a new network connection is received between the security detection service and the endpoint, then one or more actions are performed to secure network communications with the endpoint device.

主权项

1. One or more computer-readable storage media storing instructions which, when processed by one or more processors, cause:
an endpoint device transmitting to a security detection service, over one or more communications networks, a request for the security detection service to attempt to establish a network connection with the endpoint device including the security detection service transmitting a connection request to the endpoint device, wherein the request transmitted by the endpoint device to the security detection service for the security detection service to attempt to establish a network connection with the endpoint device including the security detection service transmitting a connection request to the endpoint device includes data that identifies one or more ports and protocols open on the endpoint device, and wherein the security detection service transmits a connection request to the endpoint device in response to the request from the endpoint device for the security detection service to attempt to establish a network connection with the endpoint device; the endpoint device receiving, from the security detection service over the one or more communications networks, a response to the request for the security detection service to attempt to establish a network connection with the endpoint device; the endpoint device determining whether a new network connection has been received between the security detection service and the endpoint device using the one or more ports and protocols open on the endpoint device that were specified by the endpoint device in the request transmitted by the endpoint device to the security detection service for the security detection service to attempt to establish a network connection with the endpoint device including the security detection service transmitting a connection request to the endpoint device; and in response to the endpoint device determining a new network connection has been received between the security detection service and the endpoint device using the one or more ports and protocols open on the endpoint device that were specified by the endpoint device in the request transmitted by the endpoint device to the security detection service for the security detection service to attempt to establish a network connection with the endpoint device including the security detection service transmitting a connection request to the endpoint device, then causing one or more actions to be performed to secure network communications with the endpoint device.