Unified scan engine

• US 8,800,046 B2
• Filed: 04/10/2012
• Issued: 08/05/2014
• Est. Priority Date: 04/10/2012
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Nakawatase, Ryan Tadashi, Hugard, James Michael IV, Schrecker, Sven
• Primary Examiner(s): Parthasarathy, Pramila
• Application Number:
  US13/443,325
• Publication Number:
  US 20130269029A1
• Time in Patent Office: 847 Days
• US Class Current: 726/25
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 63/16 Implementing security features at a particular protocol layer

Abstract

A scan engine receives a request to perform a particular scan on at least a portion of a computing environment. The scan engine identifies a particular language interpreter in a set of available language interpreters for use in performing the particular scan and performs the particular scan using the particular language interpreter. The scan engine returns results of the particular scan. In some implementations, the scan engine is implemented on an agent enabling communication between the scan engine and an asset management system.

Claims

1. At least one non-transitory, machine-accessible storage medium having instructions stored thereon, the instructions when executed on a machine, cause the machine to:

receiving, using a processor device, receive a request to perform a particular scan on at least a portion of a computing environment;

selecting a particular language interpreter in a set of available language interpreters provided on a scan engine for use in performing the particular scan, wherein the set of available language interpreters includes a plurality of different language interpreters including at least one second language interpreter for use in performing a second, different scan;

performing, using the scan engine, the particular scan using the particular language interpreter; and

returning results of the particular scan.

2. The storage medium of claim 1, wherein the particular scan is included in a particular scan set including a plurality of scans, and the instructions, when executed, further cause the machine to:

receive a request for the scan engine to perform at least one other scan in the particular scan set, wherein the other scan comprises the second scan;

select the second language interpreter in the set of available language interpreters for use by the scan engine in the other scan;

perform, using the scan engine, the other scan using the second language interpreter identified for use by the scan engine in the other scan; and

return the results of the other scan.

3. The storage medium of claim 2, wherein the scan engine utilizes less than all of the set of available language interpreters in scans in the particular set of scans performed by the scan engine.

4. The storage medium of claim 2, wherein at least one other scan engine is used to perform scans in the particular set of scans.

5. The storage medium of claim 1, wherein the scan engine is a particular scan engine in a plurality of scan engines.

6. The storage medium of claim 5, wherein the plurality of scan engines includes both network-based and host-based scan engines.

7. The storage medium of claim 5, wherein each scan engine in the plurality of scan engines is adapted to receive scan requests from and report scan results to a particular asset management system.

8. The storage medium of claim 6, wherein each scan engine in the plurality of scan engines communicates with the particular asset management system through a respective agent.

9. The storage medium of claim 7, wherein the scan engine is included as a plugin of the agent.

10. The storage medium of claim 8, wherein the agent includes at least one other pluggable tool.

11. The storage medium of claim 7, wherein each respective agent is an instance of a standardized agent.

12. The storage medium of claim 1, wherein the instructions, when executed, further cause the machine to add an additional language interpreter to the set of language interpreters.

13. The storage medium of claim 1, wherein the request includes a scan script executable by the scan engine to perform the particular scan.

14. The storage medium of claim 1, wherein the particular language interpreter is selected based on the request.

15. The storage medium of claim 14, wherein selecting the particular language interpreter unlocks the particular language interpreter.

16. A method comprising:

receiving, using a processor device, a request to perform a particular scan on at least a portion of a computing environment;

selecting a particular language interpreter in a set of available language interpreters provided on a scan engine for use in performing the particular scan, wherein the set of available language interpreters includes a plurality of different language interpreters including at least one second language interpreter for use in performing a second, different scan;

performing, using the scan engine, the particular scan using the particular language interpreter; and

returning results of the particular scan.

17. A system comprising:

at least one processor device;

at least one memory element; and

a scan engine including a set of available language interpreters including a plurality of language interpreters, the scan engine adapted when executed by the at least one processor device to;

receive a request to perform a particular scan on at least a portion of a computing environment;

select a particular language interpreter in the set of available language interpreters for use in performing the particular scan, wherein the plurality of different language interpreters includes at least one second language interpreter for use in performing a second, different scan;

perform the particular scan using the particular language interpreter; and

return results of the particular scan.

18. The system of claim 17, further comprising an asset management system server adapted to:

send scan requests to the scan engine, wherein the scan engine is one of a plurality of scan engines; and

process scan results received from the plurality of scan engines.

19. The system of claim 18, further comprising an agent including the scan engine and facilitating communication between the scan engine and the asset management system server.