Abstract: Various embodiments herein include distributed hardware vulnerability identification and resolution. One method embodiment includes conducting an inventory of devices on a network and generating a queue of scanning jobs for each inventoried device to discover possible modes of network entry via each device. The method then proceeds by scanning devices on the network that are to be blocked according to a stored representation of an expected configuration of each device to identify devices of interest and queuing a new job for a deep scan of each device of interest. Each deep scan is executed to search one or both of a greater portion and in greater detail of a device of interest than prior scanning. The method then passes deep scan results to an incident manager to open an incident ticket for each device of interest.

Abstract: Various embodiments herein include distributed hardware vulnerability identification and resolution. One method embodiment includes conducting an inventory of devices on a network and generating a queue of scanning jobs for each inventoried device to discover possible modes of network entry via each device. The method then proceeds by scanning devices on the network that are to be blocked according to a stored representation of an expected configuration of each device to identify devices of interest and queuing a new job for a deep scan of each device of interest. Each deep scan is executed to search one or both of a greater portion and in greater detail of a device of interest than prior scanning. The method then passes deep scan results to an incident manager to open an incident ticket for each device of interest.