Red Hat, Inc.

Rapid7, Inc.

Richard Ding Li

Anastasios Giakouminakis

Chad Loder

Derek M Abdine

Sheldon E Malm

Jeffrey L Berger

Robin Joel Landry

William F Peck

Adriaan Dm Van De Ven

Christopher Blizzard

David S Miller

A solution recommendation (SR) tool can receive vulnerabilities identified by a vulnerability scanner and/or penetration testing tool. The SR tool can determine various approaches for remediating or mitigating the identified vulnerabilities, and can prioritize the various approaches based on the efficiency of the various approaches in remediating or mitigating the identified vulnerabilities. The SR tool can recommend one or more of the prioritized approaches based on constraints such as cost, effectiveness, complexity, and the like. Once the one or more of the prioritized approaches are selected, the SR tool can recommend the one or more prioritized approaches to third-party experts for evaluation.

Methods and systems for providing recommendations to address security vulnerabilities in a network of computing systems

A reconnaissance and assessment (RA) tool can receive base information about the network, such as basic network information and details about an entity and personnel associated with network. The RA tool can utilize the base information to perform reconnaissance procedures on the network to identify the attack surface of the network. The RA tool can perform reconnaissance on the network, itself, and on other external sources, such as third party databases, search engines, and partner networks. Once the attack surface is identified, the RA tool can automatically perform appropriate security assessments on the attack surface. Additionally, if additional information is determined about the network during the security assessments, the RA tool can perform additional reconnaissance and security assessments based on the additional information.

Methods and systems for integrating reconnaissance with security assessments for computing networks

Embodiments described herein relate to systems and methods for identifying virtual machines in a network. The systems and methods comprise a virtual asset tool that can interface with a virtualization manager to receive metadata identifying virtual machines hosted by a plurality of physical machines. The virtual asset tool can subscribe to updates associated with the virtual machines, such as changes to the virtual machines, or additions or deletions of virtual machines. In response to receiving an update, the virtual asset tool can modify an asset record associated with the virtual machines and any corresponding descriptions. In embodiments, the virtual asset tool can schedule vulnerability scans for any or all of the virtual machines.

Pinned vulnerability scanner for scanning virtual machines on a single machine

A security tool can identify vulnerabilities in a computing system and determine a risk level of the vulnerabilities based on base and optional CVSS vectors and additional factors that represent the evolving nature of vulnerabilities. Likewise, the security tool can determine an overall risk for vulnerabilities, an asset, and/or a collection of assets that encompasses a global view of an asset's risk and/or collection of assets' risk, business considerations of an entity that own and controls the asset and/or the collection of assets, and the entity's associations.

Methods and systems for improved risk scoring of vulnerabilities

A client machine initiates a browser instance of a browser. The client machine selects a first user identifying state for the browser instance prior to accessing any web pages by the browser instance, wherein the first user identifying state is associated with a first data structure set that comprises a first browser history, a first browser cache and/or a first cookie that are stored at the client machine. The client machine uses the first user identifying state in a session between the browser instance and a server. The client machine updates one or more of the first browser history, the first browser cache or the first cookie of the first data structure set based on the session without updating a second data structure set associated with a second user identifying state.

Browser supporting multiple users

A method and computer system for selectively using an anonymous proxy. A user request for content is received. A determination is made as to whether the user request satisfies context criteria. When the user request satisfies the context criteria, the user request is forwarded to an anonymous proxy. When the user request does not satisfy the context criteria, the request is sent directly to a content provider.

Selective use of anonymous proxies

Embodiments described herein relate to systems and methods for performing vulnerability scans on virtual machines. The systems and methods comprise a virtual asset tool that can instantiate a vulnerability scanner on a physical machine hosting a set of virtual machines. The vulnerability scanner can scan the virtual machines to identify any vulnerabilities, security flaws, or other risks, and can provide a result of the scan to the virtual asset tool. In embodiments, the virtual asset tool can examine the result of the scan to identify any vulnerabilities resulting from the scan.

Systems and methods for performing vulnerability scans on virtual machines

A method and apparatus for filtering user identifying information. A user request for content is received, the request including user identifying information. A determination is made as to whether the user request satisfies context criteria. If the user request satisfies the context criteria, the user identifying information is filtered out from the user request. The filtered request is then sent to a content provider.

Privacy enhanced browser

A management service is provided for maintaining software of one or more users, or an enterprise. On behalf of users or enterprises, the management service collects supplemental metadata about the certification and updates of software as well as processes related to the development and testing of the software. Supplemental metadata relates to any information that qualitatively describes the software outside of its basic operations. Each piece of supplemental metadata may be individually authenticated to ensure its accuracy. In addition, pieces of supplemental metadata can be combined with other supplemental metadata. Accordingly, a user or system administrator may then use various policies to manage software and determine which updates to install based on the supplemental metadata in addition to the typical intrinsic metadata, such as dependency information.

Sharing software certification and process metadata

A method and apparatus for distributing a database implementation across multiple servers. In one embodiment, the method includes receiving information identifying an implementation of a database having a database schema, identifying the number of database servers to host the database implementation, and analyzing usage characteristics of the database schema. The method further includes distributing the database implementation over the identified number of database servers based on the analysis of the usage characteristics, and providing access to the database implementation for one or more applications, the applications being unaware of the database servers hosting the database implementation.

Virtual database system

A method and apparatus for a browser supporting multiple user identifying states. A plurality of browser instances are initiated on a client. One of a plurality of user identifying states is selected for each of the plurality of browser instances. Each selected user identifying state is used in a distinct session between the browser and a server.

Embodiments of the present invention provide a mechanism for certifying the compatibility of a software product by identifying the interfaces (API or ABI) used by that product. The source code or object code of a component is analyzed by a tool that traces which interfaces and data structures of an ABI/API are being utilized. For example, an ISV or IHV may be required to run the tool on their respective components in order to have that component certified with a particular version of an operating system and submit the results to a certification service. The certification service may collect this API/ABI information into an integrated database. The certification service may then use this database to analyze the impact of changes to an operating system at the binary interface level, proactively notify vendors prior to these changes, test compatibility and emulation libraries, and certify components are compatible with an operating system without the need of significant testing.

Certifying a software application based on identifying interface usage

A method and apparatus for selectively using an anonymous proxy. A user request for content is received. A determination is made as to whether the user request satisfies context criteria. When the user request satisfies the context criteria, the user request is forwarded to an anonymous proxy. When the user request does not satisfy the context criteria, the request is sent directly to a content provider.

Growing community of inventors

Somerville, MA, United States of America

Richard Ding Li