SYSTEM AND METHOD FOR PROTECTING A WEBSITE FROM HACKING ATTACKS

• US 20120311715A1
• Filed: 05/29/2012
• Published: 12/06/2012
• Est. Priority Date: 05/30/2011
• Status: Abandoned Application

• Current Assignee: Six Scan Ltd.
• Original Assignee: Six Scan Ltd.
• Inventors: TAL, YARON, Miron, Nitzan
• Application Number:
  US13/481,964
• Publication Number:
  US 20120311715A1
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

A system and method for protecting at least one server, in communication with a computer network, from hacking attacks including a scanner, a report processor and a control center. The scanner may monitor activity of the server, identify at least one security vulnerability, produce an automated report. The report processor may analyze the automated report and generate fixes for identified vulnerabilities.

Claims

1. A system for protecting at least one server in communication with a computer network from hacking attacks, the system comprising:

at least one scanner operable to monitor activity of said server, to identify at least one security vulnerability, and further operable to produce an automated report; and

at least one report processor operable to analyze said automated report.

2. The system of claim 1 wherein said report processor is further operable to generate at least one protective element so as to prevent exploitation of said at least one vulnerability.

3. The system of claim 1 further comprising at least one communicator operable to communicate at least one protective element to said server so as to prevent exploitation of said at least one vulnerability.

4. The system of claim 1 wherein said protective element comprises a software based element selected from a group consisting of:

patches, virtual patches, black lists, filters, reconfigurations, redirects and combinations thereof.

5. The system of claim 1 further comprising a control center operable to manage at least one of said scanner and said report processor.

6. The system of claim 3 further comprising a control center operable to manage at least one of said scanner, said report processor and said communicator.

7. The system of claim 5 wherein said control center is operable to instruct said scanner to initiate monitoring activity.

8. The system of claim 7 wherein said control center is operable to configure a timed schedule for monitoring activity.

9. The system of claim 5 wherein said control center is operable to receive said automated report from said scanner and to transfer said automated report to said report processor.

10. The system of claim 5 wherein said control center is operable to receive at least one protective element from said report processor.

11. The system of claim 5 wherein said control center is operable to communicate at least one protective element to said server.

12. The system of claim 5 wherein said control center is controllable manually.

13. The system of claim 1 wherein an agent application is executed on said at least one server and said system is operable to communicate with said agent application.

14. The system of claim 13 wherein said agent application is operable to save a log of activity on said server.

15. The system of claim 13 wherein said agent application is operable to implement said protective elements on said server.

16. The system of claim 13 wherein said agent application is operable to block potential threats from exploiting said at least one security vulnerability.

17. The system of claim 13 wherein said agent application is operable to provide said scanner access to said server.

18. A system for protecting a plurality of servers in communication with a computer network from hacking attacks, the system comprising:

at least one aggregator configured to receive data relating to activity of said plurality of servers;

at least one data processor operable to analyze said data relating to activity of said plurality of servers and to identify at least one security vulnerability common to at least a selection of said plurality of servers.

19. The system of claim 18 wherein said data processor is further operable to generate at least one protective element so as to prevent exploitation of at least one common vulnerability.

20. The system of claim 18 further comprising at least one communicator operable to communicate at least one protective element to at least one of said selection of vulnerable servers.

21. A method for protecting at least one server in communication with a computer network from hacking attacks, comprising:

executing an agent application on said at least one server;

monitoring activity of said at least one server;

identifying at least one security vulnerability;

producing an automated report;

analyzing said automated report; and

providing at least one software based protective element.

22. The method of claim 21 further comprising:

aggregating data relating to activity of a plurality of servers;

analyzing said data relating to activity of the plurality of servers; and

identifying at least one security vulnerability common to at least a selection of said plurality of servers.

23. The method of claim 22 further comprising:

generating at least one protective element for preventing exploitation of at least one common vulnerability.

24. The method of claim 22 further comprising:

communicating at least one protective element to at least one of said selection of vulnerable servers.