NKill aims to catalog vulnerabilities of every computer

The NKill database is updated daily and currently includes all .com, .org and .net domain names.

A security consultant is developing a search engine called NKill that aims to track the security vulnerabilities on every computer connected to the Internet, with the ability for users to search for vulnerable computers in a country or inside a specific company.

NKill, which currently covers all .com, .org and .net domain names, will be made available to the public within one month or so, said Anthony Zboralski, founder of Bellua Asia-Pacific, speaking Wednesday at the Hack In The Box Security Conference in Dubai.

Compiling a record of all of the vulnerabilities on every computer requires a TCP port scan of the entire Internet, a process that can take between eight and 16 hours using a 100M bps connection, Zboralski said.

These scans return detailed information, called banners, that include the version numbers of operating systems and applications that are running on each computer or server. While this information allows researchers to determine what vulnerabilities the computers have, it doesn't tell them who owns the computer.

"The main problem with scanning the Internet is that you end up with a bunch of IP addresses, but if you want to know if one of your customers is using one of these addresses it's really difficult," Zboralski said. "We could scan the entire Internet, but we didn't know which companies were vulnerable."

NKill solves this problem by matching IP addresses with domain names and the companies that use them. The database currently includes 102 million domain names and is updated daily. Users can search the database for computers with a specific vulnerability or search by company to identify vulnerabilities that affect its computers.

The database also tracks how vulnerabilities change over time, giving users a way to see how companies patch and maintain their systems over time or compare the level of computer security between different companies, Zboralski said.

Down the road, Zboralski hopes to make NKill an open-source project and plans to add more features, such as an iPhone application for mobile access and an API (application programming interface) that allows NKill to be integrated with other tools. He's also looking for a way to integrate whois data with NKill that would allow researchers to have a more detailed picture of all of the domains operated by a company or government.

"It would also be cool to show where the machines are using Google Maps," he said, adding that he's looking for volunteers to help out with the project.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags vulnerability disclosuresecuritynkillinternet

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Sumner Lemon

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?