Systems and methods for improved network vulnerability scanning and reporting

Abstract

Vulnerability scanning systems and methods are provided for automatically performing the steps necessary for compliance testing and auditing of an organization's systems, and determining security posture in real time. A Machine-in-the-Middle Microserviced Security Engine (MiMMSE) is provided that provides one-way traffic for command execution and security improvement, management for automating services in OS containers, the elimination of multiple connections to services per client to give users more control of network access, total data destruction after each run to reduce attack surfaces, encryption over container services, reverse tunnel or VPN traffic between pods, clusters, and other separated networks, and machine learning (e.g., neural-network-based) maps for command execution order.

1 . A system for performing penetration testing, comprising:
 a customer network comprising a plurality of devices;   a server providing a user interface that prompts a customer to provide a request for vulnerability testing;   a management system to create an on-demand, temporary, zero-trust testing environment including one or more testing kits selected based on one or more attributes of the customer network and the requested vulnerability testing, the testing kits including one or more commands;   wherein the zero-trust testing environment is configured to: execute the commands within each test kit against the customer network; transfer, over a one-way connection, results of the executed testing kits to the server; and provide a user interface that allows the customer to download the results.   
     
     
         2 . The system of  claim 1 , wherein the customer network includes at least one virtual private network (VPN) providing access to the plurality of devices. 
     
     
         3 . The system of  claim 1 , wherein the zero-trust testing environment executes the commands in an order that is adaptive based on the result of at least one previous command. 
     
     
         4 . The system of  claim 2 , wherein the zero-trust testing environment executes the commands in an order determined by a previously trained machine learning model. 
     
     
         5 . The system of  claim 1 , wherein the zero-trust testing environment uses distro-less containers to execute the commands. 
     
     
         6 . The system of  claim 1 , wherein the zero-trust testing environment is destroyed based on a predetermined schedule. 
     
     
         7 . A method for performing penetration testing, comprising:
 providing a customer network comprising a plurality of devices;   prompting, via a server providing a user interface, a customer to provide a request for vulnerability testing;   creating, with a management system, an on-demand, temporary, zero-trust testing environment including one or more testing kits selected based on one or more attributes of the customer network and the requested vulnerability testing, the testing kits including one or more commands;   executing the commands within each test kit against the customer network;   transferring, over a one-way connection, results of the executed testing kits to the server; and   allowing the customer to download the results in an encrypted form.   
     
     
         8 . The method of  claim 7 , wherein the customer network includes at least one virtual private network (VPN) providing access to the plurality of devices. 
     
     
         9 . The method of  claim 7 , wherein the zero-trust testing environment is configured to execute the commands in an order that is adaptive based on the result of at least one previous command. 
     
     
         10 . The method of  claim 9 , wherein the zero-trust testing environment executes the commands in an order determined by a previously trained machine learning model. 
     
     
         11 . The method of  claim 9 , wherein the zero-trust testing environment uses distro-less containers to execute the commands. 
     
     
         12 . The method of  claim 7 , wherein the zero-trust testing environment is destroyed based on a predetermined schedule. 
     
     
         13 . A machine-in-the-middle microserviced security engine comprising:
 a server providing a user interface that prompts a customer to provide a request for vulnerability testing of a customer network comprising a plurality of devices;   a management system to create an on-demand, temporary, zero-trust testing environment including one or more testing kits selected based on one or more attributes of the customer network and the requested vulnerability testing, the testing kits including one or more commands;   wherein the zero-trust testing environment is configured to: execute the commands within each test kit against the customer network; transfer, over a one-way connection, results of the executed testing kits to the server; and provide a user interface that allows the customer to download the results in an encrypted form.   
     
     
         14 . The security engine of  claim 13 , including at least one virtual private network (VPN) providing access to the plurality of devices. 
     
     
         15 . The security engine of  claim 13 , wherein the zero-trust testing environment executes the commands in an order that is adaptive based on the result of at least one previous command. 
     
     
         16 . The security engine of  claim 15 , wherein the zero-trust testing environment executes the commands in an order determined by a previously trained machine learning model. 
     
     
         17 . The security engine of  claim 13 , wherein the zero-trust testing environment uses distro-less containers to execute the commands. 
     
     
         18 . The security engine of  claim 13 , wherein the zero-trust testing environment is destroyed based on a predetermined schedule.