Method and system of eliminating vulnerabilities of a router

• US 9,787,710 B1
• Filed: 05/06/2016
• Issued: 10/10/2017
• Est. Priority Date: 03/18/2016
• Status: Active Grant

• Current Assignee: Lab A.O. Kaspersky
• Original Assignee: Lab A.O. Kaspersky
• Inventors: Janus, Marta Anna, Rusakov, Vyacheslav E.
• Primary Examiner(s): Mehrmanesh, Amir
• Application Number:
  US15/148,153
• Publication Number:
  US 20170272459A1
• Time in Patent Office: 522 Days
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 40/221 Parsing markup language streams streaming G06F40/149
• CPC Class Codes: H04L 49/351 for local area network [LAN], e.g. Ethernet switches
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and system is provided for eliminating vulnerabilities on a data network including a router for directing data in the data network. An example method includes transmitting a request through the data network to obtain access to a device coupled to the data network; accessing the device to obtain a list of available resources of the device; comparing each of the available resources of the device with resource rules in a database to identify network vulnerabilities associated with the available resources and determining an action for repairing the network vulnerabilities associated with the available resources of the device. Furthermore, according to the method, instructions can be transmitted to the device to perform the action for repairing the network vulnerabilities associated with the available resources.

Claims

1. A method for eliminating vulnerabilities on a data network including a router for directing data in the data network, the method comprising:

transmitting, by a processor, a broadcast request through the data network to obtain access to at least one device communicatively coupled to the data network;

accessing, by the processor, a web interface of at least one device communicatively coupled to the data network, wherein the web interface comprises at least one web page containing parameters and attributes of the at least one device;

obtaining using the web interface a list of available resources of the at least one device that can be remotely accessed or adjusted by the processor, wherein the list of available resources includes one or both of a parameter or an attribute of the at least one device;

comparing, by the processor, each of the available resources of the at least one device with resource rules in a database to identify at least one network vulnerability of the at least one device that can be exploited by the processor by identifying a resource with a similar vulnerable status in the database;

determining, by the processor, an action for repairing the at least one network vulnerability associated with the one available resource of the at least one device based on comparing of the each of the available resources with the resource rules in the database to identify the resource with the similar vulnerable status in the database; and

transmitting instructions to the at least one device to perform the action for repairing the at least one network vulnerability associated with the one available resource by adjusting the device through the web interface of the device.

2. The method of claim 1, wherein the at least one device is the router, the method further comprising:

accessing, by the processor, the web interface of the router by obtaining at least one web page and parsing HyperText Markup Language (HTML) elements of the web page based on a document object model, wherein the web page comprises router settings and access rights; and

extracting text from the HTML, elements containing the router settings and access rights to obtain the list of available resources of the router.

3. The method of claim 1, wherein transmitting instructions to the router for repairing the at least one network vulnerability further comprising:

accessing a configuration file stored on the router that contains the router settings of the router; and

adjusting at least one value of a router setting of the router by changing the configuration file itself.

4. The method of claim 2, wherein adjusting the router through the web interface of the router further comprises:

modifying the web page using the document object model to select an HTML control element corresponding to at least one parameter or attribute of the router.

5. The method of claim 1, further comprises:

accessing, by the processor, a second device communicatively coupled to the data network, wherein the accessing, by the processor, of the second device comprises at least one of accessing the second device through a universal plug and play protocol, accessing the second device through a file transfer by a network address of second device in the data network;

accessing the second device through a remote administration protocol, and accessing the second device by a secure shell protocol.

6. The method of claim 1, wherein the transmitting of the broadcast request through the data network comprises transmitting the request to the router that redirects the request to a plurality of devices communicatively coupled to the data network via the router.

7. The method of claim 1, wherein the list of available resources includes at least one of passwords, remote administration, domain name system settings, network ports, Wi-Fi settings, and installed firewalls.

8. A system for eliminating vulnerabilities on a data network including a router for directing data in the data network, the system comprising:

at least one database that stores resource rules relating to network vulnerabilities and actions for repairing the network vulnerabilities; and

a hardware processor configured to;

transmit a broadcast request through the data network to obtain access to at least one device communicatively coupled to the data network,

access a web interface of at least one device communicatively coupled to the data network, wherein the web interface comprises at least one web page containing parameters and attributes of the at least one device;

obtaining using the web interface a list of available resources of the at least one device that can be remotely accessed or adjusted by the processor, wherein the list of available resources includes one or both of a parameter or an attribute of the at least one device;

compare each of the available resources of the at least one device with resource rules in the at least one database to identify at least one network vulnerability of the at least one device that can be exploited by the processor by identifying a resource with a similar vulnerable status in the database,

identify the action for repairing the at least one network vulnerability associated with the one available resource of the at least one device based on comparison of the each of the available resources with the resource rules in the database to identify the resource with the similar vulnerable status in the database, and

transmit instructions to the at least one device to perform the action for repairing the at least one network vulnerability associated with the one available resource by adjusting the device through the web interface of the device.

9. The system of claim 8, wherein the at least one device is the router, the processor is further configured to:

access the web interface of the router by obtaining the at least one web page and parsing HyperText Markup Language (HTML) elements of the web page based on a document object model, wherein the web page comprises router settings and access rights, and

extract text from the HTML elements containing the router settings and access rights to obtain the list of available resources of the router.

10. The system of claim 8, wherein the processor configured to transmit instructions to the router for repairing the at least one network vulnerability is further configured to:

access a configuration file stored on the router that contains the router settings of the router; and

adjust at least one value of a router setting of the router by changing the configuration file itself.

11. The system of claim 9, wherein the processor is further configured to adjust the router through the web interface of the router is further configured to:

modify the web page using the document object model to select an HTML control element corresponding to at least one parameter or attribute of the router.

12. The system of claim 8, wherein the processor is further configured to:

access a second device communicatively coupled to the data network by at least one of accessing the second device through a universal plug and play protocol, accessing the second device through a file transfer by a network address of the second device in the data network;

accessing the second device through a remote administration protocol, and accessing the second device by a secure shell protocol.

13. The system of claim 8, wherein the processor is further configured to transmit the broadcast request through the data network by transmitting the broadcast request to the router that redirects the request to a plurality of devices communicatively coupled to the data network via the router.

14. The system of claim 8, wherein the list of available resources includes at least one of passwords, remote administration, domain name system settings, network ports, Wi-Fi settings, and installed firewalls.

15. A non-transitory computer readable medium storing computer executable instructions for eliminating vulnerabilities on a data network including a router for directing data in the data network, including instructions for:

transmitting a broadcast request through the data network to obtain access to at least one device communicatively coupled to the data network;

accessing a web interface of the at least one device communicatively coupled to the data network, wherein the web interface comprises at least one web page containing parameters and attributes of the at least one device;

obtaining using the web interface a list of available resources of the at least one device that can be remotely accessed or adjusted, wherein the list of available resources includes one or both of a parameter or an attribute of the at least one device;

comparing each of the available resources of the at least one device with resource rules in a database to identify at least one network vulnerability of the at least one device that can be exploited by identifying a resource with a similar vulnerable status in the database;

determining an action for repairing the at least one network vulnerability associated with the one available resource of the at least one device based on comparing of the each of the available resources with the resource rules in the database to identify the resource with the similar vulnerable status in the database; and

transmitting instructions to the at least one device to perform the action for repairing the at least one network vulnerability associated with the one available resource by adjusting the device through the web interface of the device.

16. The non-transitory computer readable medium of claim 15, wherein the at least one device is the router and the computer executable instructions further including instructions for:

accessing the web interface of the router by obtaining the at least one web page and parsing HyperText Markup Language (HTML) elements of the web page based on a document object model, wherein the web page comprises router settings and access rights; and

extracting text from the HTML elements containing the router settings and access rights to obtain the list of available resources of the router.

17. The non-transitory computer readable medium of claim 15, wherein instructions for transmitting instructions to the router for repairing the at least one network vulnerability further comprises instructions for:

accessing a configuration file stored on the router that contains the router settings of the router; and

adjusting at least one value of a router setting of the router by changing the configuration file itself.

18. The non-transitory computer readable medium of claim 16, wherein the instructions for adjusting the router through the web interface of the router further comprises instructions for:

modifying the web page using the document object model to select an HTML control element corresponding to at least one parameter or attribute of the router.

19. The non-transitory computer readable medium of claim 15, further comprising instructions for:

accessing, by a processor, a second device communicatively coupled to the data network, wherein the instructions for accessing the second device comprises at least one of accessing the second device through a universal plug and play protocol, accessing the second device through a file transfer by a network address of the second device in the data network;

accessing the second device through a remote administration protocol, and accessing the second device by a secure shell protocol.

20. The non-transitory computer readable medium of claim 15, wherein the instructions for transmitting of the broadcast request through the data network comprises instructions for transmitting the broadcast request to the router that redirects the request to a plurality of devices communicatively coupled to the data network via the router.

21. The non-transitory computer readable medium of claim 15, wherein the list of available resources includes at least one of passwords, remote administration, domain name system settings, network ports, Wi-Fi settings, and installed firewalls.