US 12,124,582 B2
Mitigation of external exposure of energy delivery systems
Sri Nikhil Gupta Gourisetti, Richland, WA (US); Michael E. Mylrea, Alexandria, VA (US); Md. Touhiduzzaman, Richland, WA (US); Travis Ashley, Richland, WA (US); Beverly E. Johnson, Richland, WA (US); Newton B. Brown, Richland, WA (US); Penny L. McKenzie, Richland, WA (US); and Seemita Pal, Richland, WA (US)
Assigned to Battelle Memorial Institute, Richland, WA (US)
Filed by Battelle Memorial Institute, Richland, WA (US)
Filed on Dec. 10, 2020, as Appl. No. 17/117,752.
Claims priority of provisional application 62/946,269, filed on Dec. 10, 2019.
Prior Publication US 2021/0173940 A1, Jun. 10, 2021
Int. Cl. G06F 21/57 (2013.01); G06F 16/28 (2019.01); G06F 16/953 (2019.01); G05B 19/05 (2006.01)
CPC G06F 21/577 (2013.01) [G06F 16/285 (2019.01); G06F 16/953 (2019.01); G05B 19/058 (2013.01); G05B 2219/14006 (2013.01); G05B 2219/15012 (2013.01); G06F 2221/034 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, comprising:
receiving banner information from one or more queries of a network connecting a set of devices, wherein the banner information of one or more of the devices includes common vulnerability and exposure identifiers (CVEs) and the banner information of one or more of the devices does not include a CVE;
identifying the devices based on the banner information including classifying devices without known CVEs by a device type;
determining vulnerability scores for the devices with known CVEs based on retrieved CVE information; and
determining vulnerability scores for the devices without CVEs based on a series of exploitability and impact parameter estimates associated with the device type classifications;
wherein the classifying the devices by device type includes comparing the device banner information to a regular expression dictionary linking banner information to device types, and selecting as the device type a highest confidence level output from one or more comparison outputs;
wherein the regular expression dictionary includes signatures linking banner information patterns with device types based on a combination of a data value attribute, a version, or a common weakness enumeration (CWE).