Rapid7, Inc.

Jonathan Hart

Roy Donald Hodgman

Paul Deardorff

Oriana Ott

Methods and systems for assessing a vulnerability of a network device. The systems and methods described herein combine data regarding locally discovered vulnerabilities and exposed services with data regarding what executables are provided by software installed on the network device.

Assessing vulnerability of service-providing software packages

Systems and methods for determining an extent of a vulnerability on a computer and remediating the vulnerability. An installed resource set comprising shared software resources installed on the computer is enumerated. A vulnerable resource is identified in the installed resource set. A vulnerable process set including at least one vulnerable process that uses the vulnerable resource is enumerated. And, the vulnerable process is remediated.

Vulnerability inference for identifying vulnerable processes

Methods and systems for monitoring activity on a network. The system may first classify network activity data as being generated by a human actor or an automated process. Then, the system may assign a first behavioral profile to the entity based on the network activity data and detect anomalous activity associated with the entity.

Profiling network entities and behavior

Methods and systems for scanning a network. The disclosed methods may involve receiving a list of a plurality of target devices and scanning a first device to determine if a particular port and protocol combination appears to be open on the first device. Upon determining that a particular port and protocol combination appears to be open on the first device, the method involves interrogating the first device before or during scanning of a second device to gather data regarding a service running on the first device.

Multi-stage scanning of computer devices from different geographic locations

Multi-stage network scanning

Vulnerability assessment

Methods and systems for verifying asset identity. The system includes a rules engine executing a corpus of rules to analyze received fingerprint data regarding one or more assets in a network. The rules engine may execute the rules to create a synthetic fingerprint to provide more accurate and helpful information regarding a network asset.

Growing community of inventors

Kernville, CA, United States of America

Jonathan Hart