专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2009038818A3 SYSTEM AND METHOD FOR PROVIDING NETWORK PENETRATION TESTING 审中-公开
标题翻译：用于提供网络穿透测试的系统和方法
公开(公告)号：WO2009038818A3
公开(公告)日：2009-06-18
申请号：PCT/US2008060219
申请日：2008-04-14
申请人： CORE SDI INC , RUSS FERNANDO FEDERICO , WEIL ALEJANDRO DAVID , EISSLER MATIAS ERNESTO , DIBAR FRANCISCO JAVIER , MANRIQUE HECTOR ADRIAN
发明人： RUSS FERNANDO FEDERICO , WEIL ALEJANDRO DAVID , EISSLER MATIAS ERNESTO , DIBAR FRANCISCO JAVIER , MANRIQUE HECTOR ADRIAN
IPC分类号： H04L29/06
CPC分类号： H04L63/1433 , G06F21/577
摘要： A system and method for providing network penetration testing from an end-user computer is provided. The method includes the step of determining at least one of a version of a Web browser of a target computer, contact information associated with an end-user that uses the target computer, and applications running on the target computer. The method also includes the steps of determining exploits that are associated with the running applications and that can be used to compromise the target computer, and launching the exploits to compromise the target computer. Network penetration testing may also be provided by performing the steps of determining an operating system of a target computer, selecting one of a group of modules to use in detecting services of the target computer, and detecting the services of the target computer.
摘要翻译：提供了一种用于从最终用户计算机提供网络渗透测试的系统和方法。该方法包括确定目标计算机的Web浏览器的版本，与使用目标计算机的最终用户相关联的联系人信息和运行在目标计算机上的应用程序中的至少一个的步骤。该方法还包括确定与正在运行的应用程序相关联并可用于危及目标计算机的攻击以及启动攻击以危及目标计算机的步骤。网络渗透测试还可以通过执行以下步骤来提供：确定目标计算机的操作系统;选择用于检测目标计算机的服务的一组模块中的一个;以及检测目标计算机的服务。

2. 发明申请

WO2003065172A2 FRAMEWORK FOR MAINTAINING INFORMATION SECURITY IN COMPUTER NETWORKS 审中-公开
标题翻译：维护计算机网络信息安全的框架
公开(公告)号：WO2003065172A2
公开(公告)日：2003-08-07
申请号：PCT/US2003/003054
申请日：2003-01-30
申请人： CORE SDI, INC.
发明人： ARCE VELLEGIA, Ivan, Francisco, Fernando , FUTORANSKY, Ariel , RICHARTE, Gerardo, Gabriel , KARGIEMAN, Emiliano , OCHOA, Carlos, Hernan
IPC分类号： G06F
CPC分类号： G06F21/33
摘要： A system is provided for controlling access to information technology assets in a computer network. The system includes a ticket manager server configured to generate tickets based on user data in a master database. A ticket manager client, resident on a workstation, is configured to receive tickets from the ticket manager server and distribute resource data obtained from the tickets to network security modules. The user data includes resource registers, each of which has a type field designating a particular security module, resource data for use by the designated security module, and an execution domain field that exclusively designates an execution environment in which the designated security module can use the resource data.
摘要翻译：提供一种用于控制计算机网络中对信息技术资产的访问的系统。该系统包括配置成基于主数据库中的用户数据生成票据的票务管理服务器。驻留在工作站上的售票经理客户端被配置为从票务管理服务器接收票据，并将从票据获得的资源数据分发给网络安全模块。用户数据包括资源寄存器，每个资源寄存器具有指定特定安全模块的类型字段，指定安全模块使用的资源数据以及专门指定执行环境的执行域字段，其中指定的安全模块可以使用资源数据。

3. 发明申请

WO1992014122A1 VECTOR PLOTTER WITH DOT-PRODUCING PRINTHEAD 审中-公开
标题翻译：矢量绘图仪与点滴制作的PRINTHEAD
公开(公告)号：WO1992014122A1
公开(公告)日：1992-08-20
申请号：PCT/US1992000587
申请日：1992-01-24
申请人： SDI, INC. , SANDERS, Royden, C., Jr. , FORSYTH, John, L. , LARSEN, John, R.
发明人： SDI, INC.
IPC分类号： G01D15/18
CPC分类号： G01D9/38 , B29C2791/002 , B41J3/4073 , G01D15/16 , G01D15/20 , G06K15/00 , G06K15/22 , G06K2215/0082
摘要： Vector plotter (10) having a plotter head (18) moves over the surface of a plotting media (12) in an X and Y coordinate system wherein a projecting dot-producing impact printhead (28) using a ribbon (32) is carried by the plotter head at a constant printing distance above the surface of the plotting media to replace the traditional plotting pen. Other features include a multi-head printhead (28) capable of producing different sized dots (74) to replace pens of different tip size, a structure (84) for providing the constant printing distance, a mechanism (38) for maximizing ribbon life and control arrangements (38) for providing desirable lin e quality.
摘要翻译：绘图仪矢量表（10）包括一个头示踪剂（18）在坐标X和Y其中一个打印头（28）伸出的冲击产生的的系统的绘图介质（12）的表面上移动示踪头在跟踪介质表面以上的恒定打印距离处携带带（32）的点，以取代传统的示踪笔。本发明还涉及到不同尺寸的多头打印头（28）能够产生点（74），以取代几种尺寸掺入羽毛，确保印刷的恒定距离的结构（84），机构（38）最大化带的寿命以及控制装置（38）以实现期望的线路质量。

4. 发明申请

WO2011031777A3 SYSTEM AND METHOD FOR PROBABILISTIC ATTACK PLANNING 审中-公开
标题翻译：用于概率性发起计划的系统和方法
公开(公告)号：WO2011031777A3
公开(公告)日：2011-05-05
申请号：PCT/US2010048153
申请日：2010-09-08
申请人： CORE SDI INC , SARRAUTE YAMADA CARLOS EMILIO , FUTORANSKY ARIEL , RICHARTE GERARDO GABRIEL , LUCANGELI OBES JORGE
发明人： SARRAUTE YAMADA CARLOS EMILIO , FUTORANSKY ARIEL , RICHARTE GERARDO GABRIEL , LUCANGELI OBES JORGE
IPC分类号： H04L29/06 , H04L12/26
CPC分类号： H04L41/145 , H04L41/0823 , H04L43/50 , H04L63/1433
摘要： A system and method for automated probabilistic planning of network attacks against infrastructures of computer networks and applications is provided. The embodiments automate the analysis and probabilistic planning of multi-step attacks to computer and application networks (in particular in the context of automating penetration tests), optimizing with respect to one of the following metrics: the probability of success of the actions, a numerical parameter that must be minimized (e.g., running time), or the number of logs generated by the control devices in the target network.
摘要翻译：提供了用于针对计算机网络和应用的基础结构的网络攻击的自动概率计划的系统和方法。这些实施例使对计算机和应用网络的多步攻击（特别是在自动化渗透测试的情况下）的分析和概率性规划自动化，针对以下指标之一进行优化：动作成功的可能性，数值必须最小化的参数（例如运行时间）或目标网络中的控制设备生成的日志数量。

5. 发明申请

WO9213255A3 VECTOR PLOTTER WITH DOT-PRODUCING PRINTHEAD 审中-公开
标题翻译：带有生产纸张的矢量图
公开(公告)号：WO9213255A3
公开(公告)日：1992-10-01
申请号：PCT/US9200554
申请日：1992-01-24
申请人： SDI INC , SUMMAGRAPHICS CORP
发明人： FORSYTH JOHN L , SANDERS ROYDEN C JR , LARSEN JOHN R , SMITH PAUL D , LAKE RALPH , VANDOUSSELAERE ERWIN , VERDONCK GERARD , VAN LOENHOUT WILLIAM
IPC分类号： B41J3/407 , G01D9/38 , G01D15/16 , G01D15/20 , G06K15/00 , G06K15/22 , G01D15/18 , B41J2/00 , B41J11/22 , B43L13/00
CPC分类号： G01D9/38 , B29C2791/002 , B41J3/4073 , G01D15/16 , G01D15/20 , G06K15/00 , G06K15/22 , G06K2215/0082
摘要： Vector plotter (10) having a plotter head (18) moves over the surface of a plotting media (10) in an X and Y coordinate system wherein a projecting dot-producing impact printhead (28) using a ribbon (32) is carried by the plotter head at a constant printing distance above the surface of the plotting media to replace the traditional plotting pen. Other features include a multi-head printhead (28') capable of producing different sized dots (74) to replace pens of different tip size, a structure (84) for providing the constant printing distance, a mechanism (88) for maximizing ribbon life and control arrangements (38) for providing desirable line quality.

6. 发明申请

WO1992013255A2 VECTOR PLOTTER WITH DOT-PRODUCING PRINTHEAD 审中-公开
标题翻译：带有生产纸张的矢量图
公开(公告)号：WO1992013255A2
公开(公告)日：1992-08-06
申请号：PCT/US1992000554
申请日：1992-01-24
申请人： SDI, INC. , SUMMAGRAPHICS CORPORATION , FORSYTH, John, L. , SANDERS, Royden, C., Jr. , LARSEN, John, R. , SMITH, Paul, D. , LAKE, Ralph , VANDOUSSELAERE, Erwin , VERDONCK, Gerard , VAN LOENHOUT, William
发明人： SDI, INC. , SUMMAGRAPHICS CORPORATION
IPC分类号： G01D15/18
CPC分类号： G01D9/38 , B29C2791/002 , B41J3/4073 , G01D15/16 , G01D15/20 , G06K15/00 , G06K15/22 , G06K2215/0082
摘要： In its most basic form, this invention comprises a vector plotter having a plotter head mounted for relative movement over the surface of a plotting media in an X and Y coordinate system wherein a projecting dot-producing impact printhead is carried by the plotter head at a constant printing distance above the surface of the plotting media to replace the traditional plotting pen. A multi-head printhead is also disclosed capable of producing different sized dots to replace pens of different tip size. Also disclosed is a structure for providing the constant printing distance, a mechanism for maximizing ribbon life and control arrangements for providing desirable line quality.
摘要翻译：在其最基本的形式中，本发明包括一个矢量绘图仪，其具有安装在X和Y坐标系中的绘图介质的表面上的相对运动的绘图仪头，其中投影点产生冲击打印头由绘图仪头承载在在打印介质表面以上的恒定打印距离取代了传统的绘图笔。还公开了一种多头打印头，其能够产生不同尺寸的点以替代不同尖端尺寸的笔。还公开了用于提供恒定打印距离的结构，用于使色带寿命最大化的机构和用于提供期望的线条质量的控制布置。

7. 发明申请

WO2009038818A4 SYSTEM AND METHOD FOR PROVIDING NETWORK PENETRATION TESTING 审中-公开
标题翻译：提供网络渗透测试的系统和方法
公开(公告)号：WO2009038818A4
公开(公告)日：2009-09-03
申请号：PCT/US2008060219
申请日：2008-04-14
申请人： CORE SDI INC , RUSS FERNANDO FEDERICO , WEIL ALEJANDRO DAVID , EISSLER MATIAS ERNESTO , DIBAR FRANCISCO JAVIER , MANRIQUE HECTOR ADRIAN
发明人： RUSS FERNANDO FEDERICO , WEIL ALEJANDRO DAVID , EISSLER MATIAS ERNESTO , DIBAR FRANCISCO JAVIER , MANRIQUE HECTOR ADRIAN
IPC分类号： H04L29/06
CPC分类号： H04L63/1433 , G06F21/577
摘要： A system and method for providing network penetration testing from an end-user computer is provided. The method includes the step of determining at least one of a version of a Web browser of a target computer, contact information associated with an end-user that uses the target computer, and applications running on the target computer. The method also includes the steps of determining exploits that are associated with the running applications and that can be used to compromise the target computer, and launching the exploits to compromise the target computer. Network penetration testing may also be provided by performing the steps of determining an operating system of a target computer, selecting one of a group of modules to use in detecting services of the target computer, and detecting the services of the target computer.
摘要翻译：提供了一种从终端用户计算机提供网络渗透测试的系统和方法。该方法包括确定目标计算机的Web浏览器的版本，与使用目标计算机的最终用户相关联的联系信息以及在目标计算机上运行的应用中的至少一个的步骤。该方法还包括以下步骤：确定与正在运行的应用相关联的漏洞利用，并且可以用于破坏目标计算机，以及发起漏洞以危及目标计算机。也可以通过执行确定目标计算机的操作系统，选择用于检测目标计算机的服务的一组模块中的一个以及检测目标计算机的服务来提供网络渗透测试。

8. 发明申请

WO2008109770A3 SYSTEM AND METHOD FOR PROVIDING APPLICATION PENETRATION TESTING 审中-公开
标题翻译：用于提供应用渗透测试的系统和方法
公开(公告)号：WO2008109770A3
公开(公告)日：2008-10-30
申请号：PCT/US2008056088
申请日：2008-03-06
申请人： CORE SDI INC , SOLINO TESTA ALBERTO GUSTAVO , RICHARTE GERARDO GABRIEL , RUSS FERNANDO FEDERICO , KELYACOUBIAN DIEGO MARIN , FUTORANSKY ARIEL , TISCORNIA DIEGO BARTOLOME , WAISSBEIN ARIEL , MANRIQUE HECTOR ADRIAN , DE ACHA CAMPOS JAVIER RICARDO , ARIAS EDUARDO , CUFRE SEBASTIAN PABLO , BRZOSTOWSKI AXEL ELIAN
发明人： SOLINO TESTA ALBERTO GUSTAVO , RICHARTE GERARDO GABRIEL , RUSS FERNANDO FEDERICO , KELYACOUBIAN DIEGO MARIN , FUTORANSKY ARIEL , TISCORNIA DIEGO BARTOLOME , WAISSBEIN ARIEL , MANRIQUE HECTOR ADRIAN , DE ACHA CAMPOS JAVIER RICARDO , ARIAS EDUARDO , CUFRE SEBASTIAN PABLO , BRZOSTOWSKI AXEL ELIAN
IPC分类号： G06F21/00
CPC分类号： G06F21/577
摘要： A system and method provide application penetration testing. The system contains logic configured to find at least one vulnerability in the application so as to gain access to data associated with the application, logic configured to confirm the vulnerability and determine if the application can be compromised, and logic configured to compromise and analyze the application by extracting or manipulating data from a database associated with the application. In addition, the method provides for penetration testing of a target by: receiving at least one confirmed vulnerability of the target; receiving a method for compromising the confirmed vulnerability of the target; installing a network agent on the target in accordance with the method, wherein the network agent allows a penetration tester to execute arbitrary operating system commands on the target; and executing the arbitrary operating system commands on the target to analyze risk to which the target may be exposed.
摘要翻译：系统和方法提供应用程序渗透测试。该系统包含配置为在应用程序中找到至少一个漏洞的逻辑，以便访问与应用程序相关联的数据，配置为确认漏洞并确定应用程序是否可能受到损害的逻辑，以及配置为妥协和分析应用程序的逻辑通过从与应用程序相关联的数据库中提取或操纵数据。此外，该方法通过以下方式提供对目标的渗透测试：接收目标的至少一个确认的脆弱性; 接受破坏目标确认脆弱性的方法; 根据该方法在目标上安装网络代理，其中网络代理允许穿透测试器在目标上执行任意操作系统命令; 并在目标上执行任意操作系统命令来分析目标可能被暴露的风险。

9. 发明申请

WO2004008294A2 DISTRIBUTED COMPUTING USING SYSCALL PROXYING 审中-公开
标题翻译：使用SYSCALL代理的分布式计算
公开(公告)号：WO2004008294A2
公开(公告)日：2004-01-22
申请号：PCT/US0322549
申请日：2003-07-17
申请人： CORE SDI INC
发明人： CACERES MAXIMILIAN GABRIEL , AJZENMAN GUSTAVO , QUESADA RICARDO , RICHARTE GERARDO GABRIEL , NOTARFRANCESCO LUCIANO , LEIDL BRUCE ROBERT , BURRONI JAVIER , AZUBEL FRIEDMAN AGUSTIN , BECEDILLAS RUIZ GABRIEL MARTIN
IPC分类号： G06F20060101 , G06F9/00 , G06F9/445 , G06F9/46 , G06F
CPC分类号： G06F9/547 , G06F21/50 , G06F21/52 , H04L63/1433
摘要： A system is provided for executing a system call originating in a local computer on a first remote computer connected to the local computer via a network. Communication is established between the local computer and the first remote computer via the network. A syscall server is installed in the first remote computer. A reference address is sent from the first remote computer to the local computer via the network through executing of code by the syscall server. A syscall request is built in the local computer with arguments determined using the reference address received from the first remote computer. The syscall request is sent from the local computer to the first remote computer via the network. The syscall request is copied into a stack of the first remote computer through execution of code by the syscall server. Registers are propped from the syscall request in the stack. Execution of a syscall request is initiated on the first remote computer. The result of the syscall request is pushed onto the stack. At least a portion of the result of the syscall request is sent to the local computer via the network through execution of code by the syscall server.
摘要翻译：提供了一种用于在经由网络连接到本地计算机的第一远程计算机上执行源自本地计算机的系统呼叫的系统。通过网络在本地计算机和第一远程计算机之间建立通信。系统调用服务器安装在第一台远程计算机中。通过系统呼叫服务器执行代码，通过网络将参考地址从第一个远程计算机发送到本地计算机。在本地计算机中构建系统调用请求，其参数使用从第一台远程计算机接收的参考地址确定。系统调用请求通过网络从本地计算机发送到第一个远程计算机。通过系统调用服务器执行代码将系统调用请求复制到第一个远程计算机的堆栈中。寄存器从堆栈中的系统调用请求中支持。在第一台远程计算机上启动系统调用请求的执行。系统调用请求的结果被推入堆栈。系统调用请求的结果的至少一部分通过系统呼叫服务器执行代码通过网络发送到本地计算机。

10. 发明申请

WO2003065172A3 FRAMEWORK FOR MAINTAINING INFORMATION SECURITY IN COMPUTER NETWORKS 审中-公开
公开(公告)号：WO2003065172A3
公开(公告)日：2003-08-07
申请号：PCT/US2003/003054
申请日：2003-01-30
申请人： CORE SDI, INC.
发明人： ARCE VELLEGIA, Ivan, Francisco, Fernando , FUTORANSKY, Ariel , RICHARTE, Gerardo, Gabriel , KARGIEMAN, Emiliano , OCHOA, Carlos, Hernan
IPC分类号： G06F11/30
摘要： A system, (100) is provided for controlling access to information technology assets in a computer network. The system includes a ticket manager server (130) configured to generate tickets based on user data in a master database. A ticket manager client, resident on a workstation (110), is configured to receive tickets from the ticket manager server and distribute resource data obtained from the tickets to network security modules. The user data includes resource registers, each of which has a type field designating a particular security module, resource data for use by the designated security module, and an execution domain field that exclusively designates an execution environment in which the designated security module can use the resource data.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式