Patent ID: 11924251
Assignee: QOMPLX LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 1:
2. A method for cybersecurity reconnaissance, analysis, and scoring using distributed computing services, comprising the steps of:
using a cloud computing platform comprising a hardware memory, a hardware processor, and a non-volatile storage device, and on receipt of a request from a user application, perform the steps of:
receiving a domain name for reconnaissance and scoring;
creating a first queue of Internet search tasks for the domain name using an in-memory associative array service operating on the cloud computing platform, the search tasks comprising searches for, and receipt of search results for, the following four types of domain name system records:
a domain name system search for domain name system records;
a domain name system search for domain name system sender policy framework records;
a domain name system search for domain name system domain-based message authentication, reporting, and conformance records; and
a domain name system search for domain name system zone transfer records;

implementing the first queue of Internet search tasks through one or more selectable attribute nodes of a public-facing proxy network operating on the cloud computing platform, the public-facing proxy network comprising a proxy server operating on the cloud computing platform configured to act as a public-facing proxy network and comprising one or more selectable attribute nodes;
identifying Internet protocol addresses associated with the domain name from the domain name system records; and
implementing a second queue of Internet protocol address scanning tasks for the identified Internet protocol addresses, the scanning tasks comprising an open port scan for each of a list of open ports for the domain name; and

using a distributed data processing engine operating on the cloud computing platform, perform the steps of:
receiving a cybersecurity scoring model, the cybersecurity scoring model comprising category weights for each of the following categories: domain name system records, the domain name system sender policy framework records, the domain name system domain-based message authentication, reporting, and conformance records, the zone transfer records, and the list of open ports, and further comprising an algorithm for combining the categories using the category weights;
retrieving the search results and the list of open ports stored in the cloud-based storage bin; and
calculating a cybersecurity score by applying the algorithm to the weighted categories; and
generate a cybersecurity profile for the domain name based on the cybersecurity score.