Determining application attack surface for network applications

US12050698B2 · kind B2 · utility

Assignee

• Cisco Technology, Inc. · US

Inventors

• Supreeth Rao · Cupertino, US
• Navindra Yadav · San Jose, US
• Prasannakumar Jobigenahally Malleshaiah · Sunnyvale, US
• Tapan Shrikrishna Patwardhan · Mountain View, US
• Umamaheswaran Arumugam · San Jose, US
• Darshan Shrinath Purandare · Fremont, US
• Aiyesha Ma · San Francisco, US
• Songlin Li · Chengdu, CN

Key dates

• Filing date: Jun 1, 2023
• Grant date: Jul 30, 2024
• Expiry date: Jun 1, 2043

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/033
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

Systems, methods, and computer-readable media for attack surface score computation can include the following processes. An attack surface score service receives information identifying open ports associated with an application. The attack surface score service determines an attack surface score for the application based on the information and common attack ports. A policy engine determines whether to implement a policy for reducing vulnerability of the application to attacks to yield a determination. The policy engine implements a vulnerability reduction policy based on the determination.