Patent ID: 8095982

Claim:
A security analyzer device for analyzing vulnerability of a pass-through network device under analysis (DUA) to protocol abuse of a network communications protocol, the security analyzer device comprising: at least two ports for making network connections to other devices; a computer processor for executing computer program instructions; and a computer-readable storage medium having executable computer program instructions for a single software application tangibly embodied thereon, the executable computer program instructions for the single software application comprising instructions for the computer processor to perform the steps of: establishing a network connection for the sending of messages from a sender through the pass-through network DUA to a receiver, the single software application acting as both the sender and the receiver, wherein establishing the network connection comprises: establishing a sending side of the network connection from a sending port of the security analyzer device to the pass-through network DUA, the sending port acting as a port of the sender; establishing a receiving side of the network connection from the pass-through network DUA to a receiving port of the security analyzer device, the receiving port being a different port than the sending port and the receiving port acting as a port of the receiver; and establishing a connection from the sending side of the network connection through the pass-through network DUA to the receiving side of the network connection; sending multiple test messages from the sender to the receiver, the test messages probing vulnerability of the pass-through network DUA to protocol abuse of the network communications protocol, the test messages sent from the sending port to the pass-through network DUA via the sending side of the network connection; receiving multiple response messages corresponding to the test messages, wherein the response messages are received from the pass-through network DUA at the receiving port via the receiving side of the network connection; and determining whether the pass-through network DUA has vulnerabilities by analyzing the sent test messages and the corresponding received response messages.