IP NETWORK VULNERABILITY AND POLICY COMPLIANCE ASSESSMENT BYIP DEVICE ANALYSIS

摘要

Customizable software provides assurances about the ability of an IP netw ork to satisfy security, regulatory and availability requirements by compreh ensive vulnerability and compliance assessment of IP networks through automa ted analysis of configurations of devices such as routers, switches, and fir ewalls. The solution comprises three main approaches for testing of IP devic e configurations to eliminate errors that result in vulnerabilities or requi rements compliance issues. The first approach involves checking the configur ations of devices for conformance to Best-Current-Practices provided by vend ors and organizations. Also this includes checks of compliance with regulati ons. The secon approach includes reading device configurations and collectin g beliefs about network administrator intent. An inference engine checks for consistency using previously accumulated beliefs. The third approach addres ses the multiple device/protocol issue by including an understanding of high -level service and security requirements about the specific IP network under test from the network administrators.