METHOD AND SYSTEM FOR PREVENTING COMPROMISE OF NETWORK INFRASTRUCTURE OBJECTS IN FREEIPA DIRECTORY SERVICE Russian patent published in 2024 - IPC G06F21/50 

FIELD: providing security of a corporate network.

SUBSTANCE: technical result is achieved by a method for preventing compromise of network infrastructure objects (NIO) in the FreeIPA directory service, in which: obtaining data from the FreeIPA domain controller storage, which characterize the control NIO and their attributes, the access rights granted to them, as well as reference books of links between said NIO; determining FreeIPA highly privileged objects (HVA); determining types of NIO relations between themselves; forming a graph based on the obtained data; HVA attack path is simulated using the generated graph, at which determining at least one subgraph with NIO, allowing to obtain control over HVA, or related NIO; HVA is monitored based on the simulated attack path; and in case of determination of change of access rights of NIO, detected on subgraph, performing isolation of links of at least one detected NIO from other objects and/or reduction of its privileges by removal of rights.

EFFECT: high efficiency of protecting a corporate network from compromising facilities and gaining access to highly privileged assets.

11 cl, 3 dwg, 2 tbl