METHOD AND SYSTEM OF ELIMINATING VULNERABILITIES OF SMART DEVICES

• US 20170272460A1
• Filed: 08/11/2016
• Published: 09/21/2017
• Est. Priority Date: 03/18/2016
• Status: Active Grant

• Current Assignee: Lab A.O. Kaspersky
• Original Assignee: Lab A.O. Kaspersky
• Inventors: Rusakov, Vyacheslav E., Janus, Marta Anna
• Granted Patent: US 9,860,267 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 41/0809 Plug-and-play configuration
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]

Abstract

Disclosed are systems and methods for eliminating vulnerabilities of smart devices connected to a data network. An example method includes: identifying a router providing access to the data network, obtaining access to the network and transmitting a request through the data network to obtain access to a smart device on the network. Furthermore, the method includes accessing the smart device to obtain its settings, comparing the settings with known vulnerabilities, determining an action for repairing the a network vulnerability associated with the settings of the device, and transmitting instructions to the smart device to perform the action to repair network vulnerability associated with the setting.

Claims

1. A method for eliminating vulnerabilities of smart devices connected to a data network, the method comprising:

identifying, by a processor, a router configured to provide access to the data network;

obtaining access to the network by the processor;

transmitting, by the processor, a request through the data network to obtain access to at least one smart device communicatively coupled to the router;

accessing the at least one smart device to obtain settings of the at least one smart device that can be remotely accessed or adjusted by the processor, wherein the settings of the at least one smart device includes one or both of a parameter or an attribute of the at least one smart device;

comparing, in a database, each of the settings of the at least one smart device with settings of known vulnerabilities to identify at least one network vulnerability of the at least one smart device that can be exploited by the processor by identifying a setting with a similar vulnerable status in the database;

determining, by the processor, an action for repairing the at least one network vulnerability associated with the at least one setting of the at least one smart device based on comparing of the each of the settings with the settings of known vulnerabilities in the database to identify the setting with the similar vulnerable status in the database; and

transmitting instructions to the at least one smart device to perform the action for repairing the at least one network vulnerability associated with the at least one setting of the at least one smart device.

2. The method of claim 1, further comprising:

accessing, by the processor, a web interface of the at least one smart device by obtaining a web page and parsing elements of the web page based on a document object model; and

using the web interface of the at least one smart device to obtain the settings of the at least one smart device.

3. The method of claim 2, further comprising transmitting instructions to the at least one smart device to repairing the at least one network vulnerability by adjusting the settings of a file of the at least one smart device by changing the file.

4. The method of claim 2, further comprising transmitting instructions to the at least one smart device to repair the at least one network vulnerability by adjusting through the web interface of the at least one smart device.

5. The method of claim 1, wherein the accessing, by the processor, of the at least one smart device comprises at least one of obtaining web access to the at least one smart device, accessing the at least one smart device through a universal plug and play protocol, accessing the at least one smart device through a file transfer by a network address of the at least one smart device in the data network;

accessing the at least one smart device through a remote administration protocol, and accessing the at least one smart device by a secure shell protocol.

6. The method of claim 1, wherein the transmitting of the request through the data network comprises transmitting the request to the router that redirects the request to a plurality of smart devices communicatively coupled to the data network via the router.

7. The method of claim 1, wherein the accessing of the at least one smart device to obtain the settings of the at least one smart device includes using a UPnP (Universal Plug-and-Play) protocol to obtain the settings.

8. A system for eliminating vulnerabilities of smart devices connected to a data network, the system comprising:

at least one database that stores settings of devices relating to network vulnerabilities and actions for repairing the network vulnerabilities; and

a processor configured to;

identify a router configured to provide access to the data network,

obtain access to the network,

transmit a request through the data network to obtain access to at least one smart device communicatively coupled to the router,

access the at least one smart device to obtain settings of the at least one smart device that can be remotely accessed or adjusted by the processor, wherein the settings of the at least one smart device includes one or both of a parameter or an attribute of the at least one smart device,

compare, in the least one database, each of the settings of the at least one smart device with the settings of devices of known vulnerabilities to identify at least one network vulnerability of the at least one smart device that can be exploited by the processor by identifying a setting with a similar vulnerable status in the database,

determine an action for repairing the at least one network vulnerability associated with the at least one setting of the at least one smart device based on the comparison of the each of the settings with the settings of known vulnerabilities in the database to identify the setting with the similar vulnerable status in the database, and

transmit instructions to the at least one smart device to perform the action for repairing the at least one network vulnerability associated with the at least one setting of the at least one smart device.

9. The system of claim 8, wherein the at least one device is the router, the processor is further configured to:

access a web interface of the at least one smart device by obtaining a web page and parsing elements of the web page based on a document object model; and

use the web interface of the at least one smart device to obtain the settings of the at least one smart device.

10. The system of claim 9, wherein the processor is further configured to transmit instructions to the at least one smart device to repairing the at least one network vulnerability by adjusting the settings of a file of the at least one smart device by changing the file.

11. The system of claim 9, wherein the processor is further configured to transmit instructions to the at least one smart device to repair the at least one network vulnerability by adjusting through the web interface of the at least one smart device.

12. The system of claim 8, wherein the processor is further configured to access the at least one smart device by at least one of obtaining web access to the at least one smart device, accessing the at least one smart device through a file transfer by a network address of the at least one smart device in the data network;

accessing the at least one smart device through a remote administration protocol, and accessing the at least one smart device by a secure shell protocol.

13. The system of claim 8, wherein the processor is further configured to transmit the request through the data network by transmitting the request to the router that redirects the request to a plurality of smart devices communicatively coupled to the data network via the router.

14. The system of claim 8, wherein the processor is further configured to access the at least one smart device to obtain the settings of the at least one smart device by using a UPnP (Universal Plug-and-Play) protocol to obtain the settings.

15. A non-transitory computer readable medium storing computer executable instructions for eliminating vulnerabilities of smart devices connected to a data network, including instructions for:

identifying a router configured to provide access to the data network;

obtaining access to the network;

transmitting a request through the data network to obtain access to at least one smart device communicatively coupled to the router;

accessing the at least one smart device to obtain settings of the at least one smart device that can be remotely accessed or adjusted by the processor, wherein the settings of the at least one smart device includes one or both of a parameter or an attribute of the at least one smart device;

comparing, in a database, each of the settings of the at least one smart device with settings of known vulnerabilities to identify at least one network vulnerability of the settings of the at least one smart device that can be exploited by the processor by identifying a setting with a similar vulnerable status in the database;

determining an action for repairing the at least one network vulnerability associated with the at least one setting of the at least one smart device based on comparing of the each of the settings with the settings of known vulnerabilities in the database to identify the setting with the similar vulnerable status in the database; and

transmitting instructions to the at least one smart device to perform the action for repairing the at least one network vulnerability associated with the at least one setting of the at least one smart device.

16. The non-transitory computer readable medium of claim 15, further including instructions for:

accessing a web interface of the at least one smart device by obtaining a web page and parsing elements of the web page based on a document object model; and

using the web interface of the at least one smart device to obtain the settings of the at least one smart device.

17. The non-transitory computer readable medium of claim 16, further including instructions for transmitting instructions to the at least one smart device to repairing the at least one network vulnerability by adjusting the settings of a file of the at least one smart device by changing the file.

18. The non-transitory computer readable medium of claim 16, further including instructions for transmitting instructions to the at least one smart device to repair the at least one network vulnerability by adjusting through the web interface of the at least one smart device.

19. The non-transitory computer readable medium of claim 15, wherein the instructions for accessing the at least one device comprises at least one of obtaining web access to the at least one smart device, accessing the at least one smart device through a universal plug and play protocol, accessing the at least one smart device through a file transfer by a network address of the at least one smart device in the data network;

accessing the at least one smart device through a remote administration protocol, and accessing the at least one smart device by a secure shell protocol.

20. The non-transitory computer readable medium of claim 15, wherein the instructions for transmitting of the request through the data network comprises instructions for transmitting the request to the router that redirects the request to a plurality of smart devices communicatively coupled to the data network via the router.