Method and System of Attack Surface Detection

摘要

The invention comprises a method of using sensor agents to collect information in a central location to determine the entire attack surface of all certificate based resources, which includes vulnerable, insecure, or unknown resources but also includes where all the secure resources are located and the attack surface for each certificate resource. If a vulnerable resource is detected, the system may initiated additional sensor agents to determine the threat caused by the vulnerability. The system can also assign a rating to the overall security of the network based on vulnerabilities and display the attack surface as a topographic format for easy review by administrators.

主权项

1. A method of determining an attack surface associated with a network comprising:
a. Having at least one sensor agent obtain information about certificate resources associated with the network, b. Using the obtained information to determine whether a certificate resource is associated with a vulnerability, and c. Determining the attack surface of the network based on a determination of whether the certificate resource is associated with a vulnerability.