US 12,267,369 B2
Cybersecurity analysis and protection using distributed systems
Jason Crabtree, Vienna, VA (US); Michael James, Independence, MO (US); Andrew Sellers, Monument, CO (US); and Farooq Shaikh, Reston, VA (US)
Assigned to QOMPLX LLC, Reston, VA (US)
Filed by QOMPLX LLC, Reston, VA (US)
Filed on Mar. 31, 2024, as Appl. No. 18/622,996.
Application 18/622,996 is a continuation of application No. 17/589,774, filed on Jan. 31, 2022, granted, now 11,968,235.
Application 17/589,774 is a continuation in part of application No. 16/887,304, filed on May 29, 2020, granted, now 11,297,109, issued on Apr. 5, 2022.
Application 16/887,304 is a continuation in part of application No. 16/837,551, filed on Apr. 1, 2020, granted, now 11,070,592, issued on Jul. 20, 2021.
Application 16/837,551 is a continuation in part of application No. 16/777,270, filed on Jan. 30, 2020, granted, now 11,025,674, issued on Jun. 1, 2021.
Application 16/777,270 is a continuation in part of application No. 16/720,383, filed on Dec. 19, 2019, granted, now 10,944,795, issued on Mar. 9, 2021.
Application 16/720,383 is a continuation of application No. 15/823,363, filed on Nov. 27, 2017, granted, now 10,560,483, issued on Feb. 11, 2020.
Application 16/837,551 is a continuation in part of application No. 15/818,733, filed on Nov. 20, 2017, granted, now 10,673,887, issued on Jun. 2, 2020.
Application 15/818,733 is a continuation in part of application No. 15/725,274, filed on Oct. 4, 2017, granted, now 10,609,079, issued on Mar. 31, 2020.
Application 15/823,363 is a continuation in part of application No. 15/725,274, filed on Oct. 4, 2017, granted, now 10,609,079, issued on Mar. 31, 2020.
Application 15/725,274 is a continuation in part of application No. 15/655,113, filed on Jul. 20, 2017, granted, now 10,735,456, issued on Aug. 4, 2020.
Application 15/655,113 is a continuation in part of application No. 15/616,427, filed on Jun. 7, 2017, abandoned.
Application 15/655,113 is a continuation in part of application No. 15/237,625, filed on Aug. 15, 2016, granted, now 10,248,910, issued on Apr. 2, 2019.
Application 15/616,427 is a continuation in part of application No. 15/206,195, filed on Jul. 8, 2016, abandoned.
Application 15/206,195 is a continuation in part of application No. 15/186,453, filed on Jun. 18, 2016, abandoned.
Application 15/186,453 is a continuation in part of application No. 15/166,158, filed on May 26, 2016, abandoned.
Application 15/166,158 is a continuation in part of application No. 15/141,752, filed on Apr. 28, 2016, granted, now 10,860,962, issued on Dec. 8, 2020.
Application 15/141,752 is a continuation in part of application No. 15/091,563, filed on Apr. 5, 2016, granted, now 10,204,147, issued on Feb. 12, 2019.
Application 15/141,752 is a continuation in part of application No. 14/986,536, filed on Dec. 31, 2015, granted, now 10,210,255, issued on Feb. 19, 2019.
Application 15/141,752 is a continuation in part of application No. 14/925,974, filed on Oct. 28, 2015, abandoned.
Application 15/616,427 is a continuation in part of application No. 14/925,974, filed on Oct. 28, 2015, abandoned.
Prior Publication US 2024/0244090 A1, Jul. 18, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 16/2458 (2019.01); G06F 16/951 (2019.01); H04L 61/4511 (2022.01)
CPC H04L 63/20 (2013.01) [G06F 16/2477 (2019.01); G06F 16/951 (2019.01); H04L 61/4511 (2022.05); H04L 63/0236 (2013.01); H04L 63/1425 (2013.01); H04L 63/1433 (2013.01); H04L 63/1441 (2013.01); H04L 63/0281 (2013.01); H04L 63/1416 (2013.01); H04L 63/1475 (2013.01)] 8 Claims
OG exemplary drawing
 
1. A system for cybersecurity analysis and protection employing a cyber decision platform, comprising one or more computers with executable instructions that, when executed, cause the system to:
execute a plurality of Internet search tasks for a domain name comprising searches for, and receipt of search results for, one or more domain name system records;
identify Internet protocol addresses associated with the domain name from the one or more domain name system records;
execute a first plurality of Internet protocol address scanning tasks comprising an open port scan for each Internet protocol address identified and a vulnerability scan for each open port;
receive a list of open ports, associated vulnerabilities, and a baseline and service fingerprint profile for the domain name;
execute a second plurality of Internet protocol address scanning tasks comprising a port scan detection task for each Internet protocol address identified; and
store the received search results and the results of the first and second pluralities of Internet protocol address scanning tasks;
receive a cybersecurity scoring model, the cybersecurity scoring model comprising category weights for the one or more domain name system records, the list of open ports, and associated vulnerabilities and further comprising an algorithm for combining the categories using the category weights;
compute a cybersecurity score by applying the algorithm to the weighted categories; and
generate a cybersecurity portion of a baseline and service fingerprint profile for the domain name based on the cybersecurity score.