专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08997235B2 Adaptive fuzzing system for web services 有权
标题翻译： Web服务的自适应模糊系统
公开(公告)号：US08997235B2
公开(公告)日：2015-03-31
申请号：US13367381
申请日：2012-02-07
申请人： Marcelo De Barros , Michael Andrews , Manish Mittal , Girish Bablani
发明人： Marcelo De Barros , Michael Andrews , Manish Mittal , Girish Bablani
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00 , H04L29/06 , G06F21/57
CPC分类号： H04L63/1433 , G06F21/577 , G06F2221/2101 , H04L67/02
摘要： Web applications, systems and services, which are prone to cyber-attacks, can utilize an adaptive fuzzing system and methodology to intelligently employ fuzzer technology to test web site pages for vulnerabilities. A breadth first search and minimal fuzzing testing is performed on identified pages of a web site looking for either a vulnerability or the potential for a vulnerability. Heuristics are gathered and/or generated on each tested web page to determine a vulnerability score for the page that is an indication of the page's potential for hosting a vulnerability. When a page is discovered with a vulnerability score that indicates the page has the potential for a vulnerability a depth first search and expanded fuzzing testing is performed on one or more branches of the web site that begin with the page with the potential vulnerability.
摘要翻译：易于网络攻击的Web应用程序，系统和服务可以利用自适应模糊系统和方法来智能地使用fuzzer技术来测试网站页面的漏洞。在网站的识别页面上进行广泛的首次搜索和最小的模糊测试，以寻找脆弱性或潜在的漏洞。在每个测试的网页上收集和/或生成启发式算法，以确定页面的漏洞得分，这是该页面可能承载漏洞的可能性。当发现具有指示页面具有漏洞的漏洞分数的页面时，将在具有潜在漏洞的页面开始的网站的一个或多个分支上执行深度优先搜索和扩展的模糊测试。

2. 发明申请

US20110219424A1 INFORMATION PROTECTION USING ZONES 审中-公开
标题翻译：信息保护使用区域
公开(公告)号：US20110219424A1
公开(公告)日：2011-09-08
申请号：US12718843
申请日：2010-03-05
申请人： Anatoliy Panasyuk , Girish Bablani , Charles McColgan , Krishna Kumar Parthasarathy
发明人： Anatoliy Panasyuk , Girish Bablani , Charles McColgan , Krishna Kumar Parthasarathy
IPC分类号： G06F21/00 , G06F15/16
CPC分类号： G06F21/85 , G06F21/606 , G06F21/6236 , G06Q10/00 , H04L63/0227 , H04L63/10 , H04L63/104
摘要： Some embodiments are directed to an information protection scheme in which devices, users, and domains in an information space may be grouped into zones. When information is transferred across a zone boundary, information protection rules may be applied to determine whether the transfer should be permitted or blocked, and/or whether any other policy actions should be taken (e.g., requiring encryption, prompting the user for confirmation of the intended transfer, or some other action).
摘要翻译：一些实施例涉及信息保护方案，其中信息空间中的设备，用户和域可以被分组成区域。当信息通过区域边界传送时，可以应用信息保护规则来确定是否允许或阻止传输，和/或是否应采取任何其他策略动作（例如，要求加密，提示用户确认预期转移或其他行动）。

3. 发明授权

US5729745A Methods and apparatus for creating a base class for manipulating external data connections in a computer generated document 失效
标题翻译：用于创建用于在计算机生成的文档中操纵外部数据连接的基类的方法和装置
公开(公告)号：US5729745A
公开(公告)日：1998-03-17
申请号：US339983
申请日：1994-11-14
申请人： Cory Alan Reina , Girish Bablani
发明人： Cory Alan Reina , Girish Bablani
IPC分类号： G06F9/44 , G06F9/46
CPC分类号： G06F9/543
摘要： A method and apparatus for creating a base class and derived classes in an object-oriented computer programming environment that allows an application program to manipulate external data connections in a similar manner. The base class includes sufficient functionality for all external data connections regardless of the protocol of the data transfer mechanism that is utilized for the external data connection such that the specific function calls required from the application to implement each data transfer mechanism is hidden from the application. Thus, the application sees all external data connections as being similar because the application issues function calls only to the base class.
摘要翻译：一种用于在面向对象的计算机编程环境中创建基类和派生类的方法和装置，其允许应用程序以类似的方式操纵外部数据连接。基类包括用于所有外部数据连接的足够的功能，而不管用于外部数据连接的数据传输机制的协议，使得应用程序所需的实现每个数据传输机制的特定功能调用从应用程序中隐藏起来。因此，应用程序将所有外部数据连接视为相似的，因为应用程序仅向基类发出功能调用。

4. 发明申请

US20130205397A1 ADAPTIVE FUZZING SYSTEM FOR WEB SERVICES 有权
标题翻译：用于WEB服务的自适应FUZZING系统
公开(公告)号：US20130205397A1
公开(公告)日：2013-08-08
申请号：US13367381
申请日：2012-02-07
申请人： Marcelo De Barros , Michael Andrews , Manish Mittal , Girish Bablani
发明人： Marcelo De Barros , Michael Andrews , Manish Mittal , Girish Bablani
IPC分类号： G06F21/00
CPC分类号： H04L63/1433 , G06F21/577 , G06F2221/2101 , H04L67/02
摘要： Web applications, systems and services, which are prone to cyber-attacks, can utilize an adaptive fuzzing system and methodology to intelligently employ fuzzer technology to test web site pages for vulnerabilities. A breadth first search and minimal fuzzing testing is performed on identified pages of a web site looking for either a vulnerability or the potential for a vulnerability. Heuristics are gathered and/or generated on each tested web page to determine a vulnerability score for the page that is an indication of the page's potential for hosting a vulnerability. When a page is discovered with a vulnerability score that indicates the page has the potential for a vulnerability a depth first search and expanded fuzzing testing is performed on one or more branches of the web site that begin with the page with the potential vulnerability.
摘要翻译：易于网络攻击的Web应用程序，系统和服务可以利用自适应模糊系统和方法来智能地使用fuzzer技术来测试网站页面的漏洞。在网站的识别页面上进行广泛的首次搜索和最小的模糊测试，以寻找脆弱性或潜在的漏洞。在每个测试的网页上收集和/或生成启发式算法，以确定页面的漏洞得分，这是该页面可能承载漏洞的可能性。当发现具有指示页面具有漏洞的漏洞分数的页面时，将在具有潜在漏洞的页面开始的网站的一个或多个分支上执行深度优先搜索和扩展的模糊测试。

5. 发明申请

US20100266132A1 SERVICE-BASED KEY ESCROW AND SECURITY FOR DEVICE DATA 审中-公开
标题翻译：基于服务的主要设备数据的安全性和安全性
公开(公告)号：US20100266132A1
公开(公告)日：2010-10-21
申请号：US12424151
申请日：2009-04-15
申请人： Girish Bablani , Anatoliy Panasyuk , Scott Colin Cottrille , Dennis Batchelder
发明人： Girish Bablani , Anatoliy Panasyuk , Scott Colin Cottrille , Dennis Batchelder
IPC分类号： H04L9/08
CPC分类号： H04L9/0894 , H04L2209/80 , H04W12/04 , H04W12/0802 , H04W12/1206 , H04W12/1208
摘要： Data protection services for portable, handheld, or mobile device are provided in part by one or more cooperating network or data service(s), such as a cloud service, that provide volatile encryption/decryption key information to the device(s). Decryption key(s) are retrieved on demand by a device or application of the device from a network service or other data service based on an analysis of device and user credential(s). Retrieval of keys can be triggered automatically by meeting a set of pre-conditions by the device or application, or explicitly or implicitly requested by input to the device or application. Thus, decryption keys are provided to the mobile device in real time, on-demand, explicitly or implicitly defining a volatile lifetime prior to expiration of the decryption keys.
摘要翻译：用于便携式，手持式或移动设备的数据保护服务部分地由向服务器提供易失性加密/解密密钥信息的一个或多个协作网络或数据服务（诸如云服务）提供。基于设备和用户凭证的分析，根据设备或设备的应用从网络服务或其他数据服务检索解密密钥。可以通过满足设备或应用程序的一组前提条件，或通过输入到设备或应用程序明确或隐含地请求来自动触发密钥检索。因此，解密密钥在解密密钥到期之前实时地，按需地，显式地或隐含地定义了易失性生存期，被提供给移动设备。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式