CPC H04L 63/1433 (2013.01) [G06F 30/20 (2020.01); H04L 41/145 (2013.01); H04L 63/1491 (2013.01); H04L 63/145 (2013.01); H04L 2463/144 (2013.01)] | 25 Claims |
1. A non-transitory machine-readable storage medium, having instructions and data comprising an application stored thereon and configured to be executed on a processor of a device, the instructions and data including a plurality of attack templates defining a plurality of attacks that may be executed against the device, wherein an attack template contains data representative of attack execution steps associated with one or more attacks defined in the attack template, and a decision tree comprising a logical tree with tree branches representing different execution paths through which attacks defined by the plurality of attack templates may be executed against the device, wherein execution of the instructions enables the device to:
execute attacks derived from the execution paths in the decision tree against the device; and
for each attack template for which one or more attacks are executed for the device,
collect results for the one or more attacks; and
process the results to determine exploitable vulnerabilities for the device.
|