Cybersecurity penetration test platform

Patent metadata

Field	Value
Publication number	US-11252173-B2
Application number	US-201916455987-A
Country	US
Kind code	B2
Filing date	Jun 28, 2019
Priority date	Jun 28, 2019
Publication date	Feb 15, 2022
Grant date	Feb 15, 2022

Abstract

A method, system and non-transitory computer-readable medium used for testing a plurality of circuits to determine open surfaces are disclosed. The method includes: receiving one or more of attack techniques, and known open surfaces; carrying out attacks on a circuit to determine vulnerable surfaces of the circuit; determining when new open surfaces exist in the circuit; updating an attack plan based on the new open surfaces; carrying out the attack plan; generating a report of the open and vulnerable surfaces; and updating a repository to include new attack techniques against newly discovered open surfaces of the circuit.

First claim

What is claimed is:

1. A method of testing a plurality of circuits to determine open surfaces, the method comprising:
receiving one or more of attack techniques, and known open surfaces;
carrying out attacks on a circuit to determine vulnerable surfaces of the circuit;
determining when new open surfaces exist in the circuit;
updating an attack plan based on the new open surfaces;
carrying out the attack plan; generating a report of the open and vulnerable surfaces; and
updating a regression test suite to include new attack techniques against newly discovered open surfaces of the circuit.

2. The method of claim 1 , further comprising, after carrying out the attacks:
determining that when no new open surfaces exist in the circuit, not updating the attack plan; and
carrying out of the attack plan.

3. The method of claim 2 , further comprising, after carrying out the attack plan:
generating a report of the determined open surfaces for the circuit.

4. The method of claim 1 , wherein the report comprises newly discovered attack surfaces, or newly determined open surfaces, or both.

5. The method of claim 4 , further comprising storing the newly discovered attack surfaces, or the newly discovered open surfaces in the regression test suite.

6. The method of claim 1 , further comprising determining when a service on an open port is known; and after the determining when the service on the open surface is known, executing an exploitation service on the open port.

7. A system for testing a plurality of components to determine vulnerability and open surfaces, the system comprising:
a test automation platform, comprising: a memory that stores executable instructions; and a processor configured to execute the instructions retrieved from the memory, wherein when executed by the processor, the instructions cause the processor to:
receive one or more of attack techniques, known open surfaces;
carry out attacks on a circuit to determine vulnerable surfaces of the circuit; determine when new open surfaces exist in the circuit;
update an attack plan based on the new open surfaces; carry out the attack plan; generate a report of the open and vulnerable surfaces; and
update a repository to include new attack techniques against discovered new open surfaces for the circuit.

8. The system of claim 7 , wherein the memory that stores executable instructions further comprises instructions, when executed, further cause the processor to:
determine when no new open surfaces exist in the circuit, and not update the attack plan; and
perform the carry out of the attack plan.

9. The system of claim 7 , wherein the memory that stores executable instructions further comprises instructions, when executed, further cause the processor to:
generate a report of the determined open surfaces for the circuit after the performing of the carry out of the attack plan.

10. The system of claim 7 , wherein the memory further comprises:
a security tool kit;
a test suite; and
an attack database.

11. The system of claim 10 , wherein the test suite and the attack database comprise at least a portion of the instructions.

12. The system of claim 10 , wherein the security tool kit comprises the instructions that carry out the attack plan.

13. The system of claim 10 , further comprising an emulator, comprising:
a plurality of communication layers, each of the communication layers adapted to transmit the attack plan to the circuit based on a protocol specific to the circuits.

14. The system of claim 13 , wherein the processor is a first processor, the circuit is a first circuit, and the system further comprises an enterprise platform, comprising:
a second processor configured to execute the instructions retrieved from the memory, wherein the instructions, when executed, cause the first processor to carry out testing of a second circuit.

15. The system of claim 10 , wherein the memory comprises a security test suite and an attack database.

16. The system of claim 10 , wherein the memory further comprises a customer threat library and a customer threat database.

17. The system of claim 10 , wherein the repository is a regression test suite.

18. A non-transitory computer-readable storage medium that stores machine executable instructions executable on a processor, which when executed by the processor cause the processor to perform a method, the method comprising:
receiving one or more of attack techniques, and known open surfaces;
carrying out attacks on a circuit to determine vulnerable surfaces of the circuit;
determining when new open surfaces exist in the circuit;
updating an attack plan based on the new open surfaces;
carrying out the attack plan; generating a report of the open and vulnerable surfaces; and
updating a regression test suite to include new attack techniques against newly discovered open surfaces of the circuit.

19. The non-transitory computer-readable medium of claim 18 , wherein the method further comprises, after carrying out the attacks:
determining that when no new open surfaces exist in the circuit, not updating the attack plan; and
carrying out of the attack plan.

20. The non-transitory computer-readable medium of claim 18 , wherein the method further comprises, after carrying out the attacks:
generating a report of the determined open surfaces for the circuit.

Assignees

• Keysight Technologies Inc

Inventors

• Metzger Michael
• Leifert Thomas
• Mcgregory Stephen Lee
• Lee Dean

Classifications

• H04L63/1441

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title

• G06F11/267

  Reconfiguring circuits for testing, e.g. LSSD, partitioning · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/1433 Primary

  Vulnerability analysis · CPC title