search

minvws / nl-kat-coordination

OpenKAT scans networks, finds vulnerabilities and creates accessible reports. It integrates the most widely used network tools and scanning software into a modular framework, accesses external databases such as shodan, and combines the information from all these sources into clear reports. It also includes lots of cat hair.
https://openkat.nl
European Union Public License 1.2
127 stars 58 forks source link

Dedupe of jobs when signatures are similar over organizations. #3803

Open underdarknl opened 2 weeks ago

underdarknl commented 2 weeks ago

About this feature

A feature request was made by Kennisnet, Z-cert and ip-zorg that would allows us to avoid doing multiple scans from similar organizations for the same assets. Deduplication of jobs that ask the same question from organizations could solve this.

Detailed description

We could see if a recent successful job is available within the scheduler and copy the data over from that organization into the newly requesting organization.

Obviously allowing a job to instantly return data scanned by another organization would result in the new user 'knowing' someone else also has these assets in their organization which might not be what we'd want. As such maybe organizations (or installations) should enable/disable this. Eg, in this installation deduplication is allowed, and for organization X jobs are readable for other organizations. For organization Y jobs are not readable for deduplication..

Feature benefit/User story

This avoids repeated scans, and associated resource consumption, and possibly getting blocked by the scanned parties when large amounts on organizations use similar assets.

Specifications

The implementation should include…

Additional information

Any additional information, considerations, or context that might be helpful for understanding or evaluating the feature request.

Design

This part should only be filled in by the OpenKAT design team.

Screenshots

Include screenshots of the proposed design changes here.

Figma link

Link to the Figma design for further visualization (if applicable)

Implementation

This part should only be filled in by the developers.

Possible solution

Outline your proposed solution for implementing the feature. You can include any specific ideas, designs, or functionalities here.

Alternatives considered

Describe any alternative approaches or solutions you've considered, and why you believe the proposed solution is superior.

underdarknl commented 4 hours ago

What do we do with user created jobs? Rescan always?

underdarknl commented 4 hours ago

Where to implement this?