US 12,118,082 B1
Automated scan engine assignment
James Cancilla, Milton (CA); Paul Miseiko, Mississauga (CA); and Emmett Kelly, Belfast (GB)
Assigned to Rapid7, Inc., Boston, MA (US)
Filed by Rapid7, Inc., Boston, MA (US)
Filed on Jan. 31, 2022, as Appl. No. 17/588,413.
Application 17/588,413 is a continuation in part of application No. 17/512,798, filed on Oct. 28, 2021.
Application 17/588,413 is a continuation in part of application No. 17/512,795, filed on Oct. 28, 2021.
Int. Cl. H04L 9/40 (2022.01); G06F 21/55 (2013.01)
CPC G06F 21/554 (2013.01) [G06F 2221/034 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
one or more hardware processors with associated memory that implement automated scan engine assignment, wherein the one or more hardware processors are configured to:
responsive to determining to initiate a scan of a target asset, determine a scan engine assignment strategy for automatically assigning one or more scan engines to perform the scan, wherein, to determine the scan engine assignment strategy, the one or more hardware processors are configured to implement a strategy selection scheme that selects the scan engine assignment strategy from a hierarchy of scan engine assignment strategies according to a following descending order of precedence:
(i) an explicit assignment strategy that utilizes one or more user-specified explicit assignment parameters to determine a particular scan engine of the plurality of scan engines to perform the scan,
(ii) a target binding strategy that utilizes one or more user-specified target binding parameters to determine a particular scan engine of the plurality of scan engines to perform the scan,
(iii) a passive discovery strategy that utilizes reachable target data from a plurality of scan engines to determine the one or more scan engines to perform the scan,
(iv) an active discovery strategy that utilizes output data from the plurality of scan engines to determine the one or more scan engines to perform the scan,
(v) a scan engine subnet strategy that utilizes subnet data to determine which of the plurality of scan engines are capable of scanning the target asset, and
(vi) a random selection strategy that utilizes a random engine assignment scheme to determine the one or more scan engines to perform the scan;
automatically assign, using the scan engine assignment strategy, the one or more scan engines to perform the scan; and
perform the scan using the one or more scan engines.