Patent ID: 11924251
Assignee: QOMPLX LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A system for cybersecurity reconnaissance, analysis, and scoring using distributed computing services, comprising:
a cloud computing platform comprising a hardware memory, a hardware processor, and a non-volatile storage device;
a proxy server operating on the cloud computing platform configured to act as a public-facing proxy network, the public-facing proxy network comprising one or more selectable attribute nodes;
wherein the cloud computing platform, upon request by a user application:
receives a domain name for reconnaissance and scoring; and
creates a first queue of Internet search tasks for the domain name using an in-memory associative array service, the search tasks comprising searches for, and receipt of search results for, each of the following four types of domain name system records:
a domain name system search for domain name system records;
a domain name system search for domain name system sender policy framework records;
a domain name system search for domain name system domain-based message authentication, reporting, and conformance records; and
a domain name system search for domain name system zone transfer records;

implements the first queue of Internet search tasks through the one or more selectable attribute nodes of the public-facing proxy network;
identifies Internet protocol addresses associated with the domain name from the domain name system records; and
implements a second queue of Internet protocol address scanning tasks for the identified Internet protocol addresses, the scanning tasks comprising an open port scan for each of a list of open ports for the domain name; and

a distributed data processing engine comprising a second plurality of programming instructions stored in the memory which, when operating on the processor, causes the cloud computing platform to:
receive a cybersecurity scoring model comprising category weights for a plurality of categories drawn from: domain name system records, domain name system sender policy framework records, domain name system domain-based message authentication, reporting, and conformance records, zone transfer records, and the list of open ports, and further comprising an algorithm for combining the categories using the category weights;
retrieve the search results and the list of open ports stored in the cloud-based storage bin; and
calculate a cybersecurity score by applying the algorithm to the weighted categories; and
generate a cybersecurity profile for the domain name based on the cybersecurity score.