International Business Machines Corporation

Mary E Karnes

Letitia K Calvert

W Carey Bunn

Mira Wilczek

Brooke Madsen Anderson

Wiliam C Bunn

Sarah M Lieberman

A method and system. All Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) ports on a gateway computer at a network perimeter of a network are scanned to determine whether an unauthorized application outside the network perimeter and/or at least one unauthorized service from the unauthorized application is available within the network perimeter via the gateway computer. Penetration tests are executed on the gateway computer to attempt to exploit a vulnerability of the gateway computer as revealed by scanning the ports on the gateway computer. A first component associated with a first respective connection to the network is identified. It is determined that the first component complies with a corresponding industry benchmark for security. A second component associated with a second respective connection to the network is identified. It is determined that the second component complies with a corresponding security policy of a company associated with the network.

Assessment of network perimeter security

A method and system for assessing security of a network perimeter of a network. Security of an authentication computer from attack is reviewed. Users outside of the network perimeter that request access to an application within the network perimeter are authenticated. Vulnerability of a gateway computer at the network perimeter from applications outside of the network perimeter is reviewed. The reviewing of vulnerability of the gateway computer includes scanning ports on the gateway computer to determine whether an unauthorized application outside the network perimeter and/or at least one unauthorized service from the unauthorized application is available within the network perimeter via the gateway computer.

A method for providing network perimeter security assessment that involves a combination of perimeter security assessment disciplines is disclosed. A security review of a network perimeter architecture is performed along with a review of the security of data processing devices that transfer data across the perimeter of the network, a review of the security of applications that transfer data across said perimeter and a review of the vulnerability of applications or data processing devices within said perimeter from computers or users outside of said perimeter. Each of the reviews may be performed by comparison to a security policy of an enterprise that owns or controls the network.

Method, apparatus and program storage device for providing network perimeter security assessment

A graphical representation of the firewall and a network coupled to the firewall is generated and displayed. A number of an inbound port of the network is displayed. An arrow adjacent to the port number pointing toward the network is displayed to indicate that a communication is permitted to the port. The port number and the arrow are located between an icon for the network and an icon for the firewall. A port number of a destination of a communication originating from the network is displayed. Also, another arrow adjacent to the destination port number pointing toward the firewall is displayed to indicate that a communication is permitted to the destination port number. The destination port number and the other arrow are located between an icon for the network and an icon for the firewall.

Growing community of inventors

Boulder, CO, United States of America

Mary E Karnes