SYSTEM AND METHOD FOR REMOTELY CONDUCTING A SECURITY ASSESSMENT AND ANALYSIS OF A NETWORK

• US 20130014263A1
• Filed: 07/06/2012
• Published: 01/10/2013
• Est. Priority Date: 07/08/2011
• Status: Active Grant

• Current Assignee: Outpost24 AB
• Original Assignee: Rapid Focus Security, LLC
• Inventors: Porcello, David, Wies, Oliver
• Granted Patent: US 9,544,323 B2
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: H04L 2463/041 using an encryption or decryption engine integrated in transmitted data
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

A system and method for performing a security audit of a target network. The system includes a device that establishes a connection to the target network through a communication link. The device has reverse tunneling capabilities for establishing a secure tunnel over the Internet. The system also includes a receiving computer connected to the device through the secure tunnel established by the device over the Internet, and the receiving computer sends commands to the device for performing the security audit of the target network. The device is deployed onsite near the network and the receiving computer is located at a remote offsite location. Also, the device may be covertly hidden onsite near the network to simulate a malicious attack on the target network.

Claims

1. A system for performing a security audit of a target network, the target network including a communication link, the system comprising:

a device capable of establishing a connection to the target network through the communication link and the device having reverse tunneling capabilities for establishing a secure tunnel over the Internet; and

a receiving computer connected to the device through the secure tunnel established by the device over the Internet, the receiving computer sends commands to the device for performing the security audit of the target network;

wherein the device is deployed onsite near the target network and the receiving computer is located at a remote offsite location.

2. The system of claim 1, wherein security auditing software tools are stored in memory associated with the device.

3. The system of claim 1, wherein the device is a form factor computer, drop box device or plug computer.

4. The system of claim 1, wherein the device is a mobile phone.

5. The system of claim 1, wherein the device is incorporated into a power strip.

6. The system of claim 1, wherein the secure tunnel established by the device is encrypted via SSH.

7. The system of claim 1, wherein device connects to the Internet via an Ethernet connection to the target network.

8. The system of claim 1, wherein the device connects to the Internet via a wireless adapter connected to the device.

9. The system of claim 1, wherein the device connects to the Internet via a 3G cellular network adapter connected to the device.

10. The system of claim 9, wherein the device is capable of establishing out-of-band SSH access over the 3G network.

11. The system of claim 1, wherein the device can be covertly hidden onsite at the target network.

12. The system of claim 1, wherein the device can be accessed by the receiving computer through a web-based user interface.

13. A method for performing a security audit of a target network, the target network including a communication link, the method comprising:

connecting a device to the target network through the communication link;

establishing a secure tunnel over the Internet between the device and a receiving computer; and

sending commands from the receiving computer to the device for performing the security audit of the target network, wherein the device is deployed onsite at the target network and the receiving computer is located at a remote offsite location.

14. The method of claim 13, further comprising bypassing a firewall of the target network with the device when creating a secure tunnel to the receiving computer.

15. The method of claim 13, further comprising receiving scan results from the device performing the security audit of the target network at the receiving computer.

16. The method of claim 13, wherein the device is a form factor computer, drop box device or plug computer, and the device includes security auditing software tools stored in memory associated with the device.

17. The method of claim 13, wherein the device is a mobile phone.

18. The method of claim 13, wherein the device is incorporated into a power strip.

19. The method of claim 13, wherein the secure tunnel established by the device is encrypted via SSH.

20. The method of claim 13, further comprising covertly hiding the device onsite at the target network.