Automated penetration analysis system and method

Details Automated penetration analysis system and method Automated penetration analysis system and method

1992-04-30

1996-01-16

Voeltz, Emanuel T.

Boots, shoes, and leggings

364DIG1, 3642864, 364DIG2, 3649187, 395600, 380 4, H04L 900, G06F 1300

Patent

active

054854091

ABSTRACT:
The present invention provides a penetration-analysis method, which (1) provides a systematic approach to penetration analysis, (2) enables the verification of penetration-resistance properties, and (3) is amenable to automation. An Automated Penetration Analysis (APA) tool is provided, to support the penetration analysis method. The penetration-analysis system and method is based on a theory of penetration-resistant computer systems, a model of penetration analysis, and a unified representation of penetration patterns. The theory consists of the Hypothesis of Penetration-Resistant Systems and a set of design properties that characterize resistance to penetration. The penetration-analysis model defines a set of states, a state-invariant for penetration resistance, and a set of rules that can be applied for analyzing the penetration vulnerability of a system. An interpretation of the Hypothesis of Penetration-Resistant Systems within a given system provides the Hypothesis of Penetration Patterns, which enables the present invention to define a unified representation for a large set of penetration instances as missing check patterns.

REFERENCES:
patent: 4649515 (1987-03-01), Thompson et al.
patent: 4956769 (1990-09-01), Smith
patent: 5060279 (1991-10-01), Crawford et al.
patent: 5099436 (1992-03-01), McCown et al.
patent: 5133063 (1992-07-01), Naito et al.
patent: 5161245 (1992-11-01), Fenwick
patent: 5197004 (1993-03-01), Sobotka et al.
Gupta et al., "Towards a Theory of Penetration-Resistant Systems and its Applications", Proc. of the 4th IEEE Workshop on Computer Security Foundations, Franconia, N.H., pp. 62-78, Jun. 1991.
Jiang et al., "Distributed System Security Research at FSD Gaithersburg", IBM Document No. FSDSS-9202, Jan. 8, 1992.
Gupta et al., "Experience with a Penetartion Analysis Method and Tool", U of MD, Electrical Engineering Department, Technical Report No. 2881, Apr. 1992.
Tsai et al., "Distributed System and Security Management with Centralized Control", 1992 EurOpen/USENIX Workshop, Jersey, U.K., Apr. 6-9, 1992.

Affiliated with

Also associated with

Rating

Automated penetration analysis system and method does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Automated penetration analysis system and method, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Automated penetration analysis system and method will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-314602