专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20110321016A1 INJECTION CONTEXT BASED STATIC ANALYSIS OF COMPUTER SOFTWARE APPLICATIONS 有权
标题翻译：基于注入上下文的计算机软件应用的静态分析
公开(公告)号：US20110321016A1
公开(公告)日：2011-12-29
申请号：US12825293
申请日：2010-06-28
申请人： YINNON A. HAVIV , ROEE HAY , MARCO PISTOIA , ORY SEGAL , ADI SHARABANI , TAKAAKI TATEISHI , OMER TRIPP , OMRI WEISMAN
发明人： YINNON A. HAVIV , ROEE HAY , MARCO PISTOIA , ORY SEGAL , ADI SHARABANI , TAKAAKI TATEISHI , OMER TRIPP , OMRI WEISMAN
IPC分类号： G06F11/36 , G06F9/44
CPC分类号： G06F11/3604 , G06F8/75 , G06F21/577
摘要： Embodiments of the invention generally relate to injection context based static analysis of computer software applications. Embodiments of the invention may include selecting a sink within a computer software application, tracing a character output stream leading to the sink within the computer software application, determining an injection context of the character output stream at the sink, where the injection context is predefined in association with a state of the character output stream at the sink, identifying any actions that have been predefined in association with the identified injection context, and providing a report of the actions.
摘要翻译：本发明的实施例一般涉及计算机软件应用的基于注入上下文的静态分析。本发明的实施例可以包括选择计算机软件应用程序内的汇点，跟踪通向计算机软件应用程序内的汇点的字符输出流，确定汇点处的字符输出流的注入上下文，其中注入上下文在与汇点处的字符输出流的状态相关联，识别已经与所识别的注入上下文相关联地预定义的任何动作，以及提供动作的报告。

2. 发明申请

US20120266246A1 PINPOINTING SECURITY VULNERABILITIES IN COMPUTER SOFTWARE APPLICATIONS 有权
公开(公告)号：US20120266246A1
公开(公告)日：2012-10-18
申请号：US13085902
申请日：2011-04-13
申请人： YAIR AMIT , ROEE HAY , ROI SALTZMAN , ADI SHARABANI
发明人： YAIR AMIT , ROEE HAY , ROI SALTZMAN , ADI SHARABANI
IPC分类号： G06F21/00
CPC分类号： G06F21/52 , G06F21/55 , G06F2221/033
摘要： A build process management system can acquire data pertaining to a software build process that is currently being executed by an automated software build system. The software build process can include executable process steps, metadata, and/or environmental parameter values. An executable process step can utilize a build artifact, representing an electronic document that supports the software build process. The acquired data can then be synthesized into an immutable baseline build process and associated baseline artifact library. The baseline artifact library can store copies of the build artifacts. The immutable baseline build process can include baseline objects that represent data values and dependencies indicated in the software build process. In response to a user-specified command, an operation can be performed upon the baseline build process and associated baseline artifact library.

3. 发明申请

US20130167124A1 DETECTION OF CUSTOM PARAMETERS IN A REQUEST URL 审中-公开
标题翻译：在请求URL中检测自定义参数
公开(公告)号：US20130167124A1
公开(公告)日：2013-06-27
申请号：US13447952
申请日：2012-04-16
申请人： YAIR AMIT , ROEE HAY , ROI SALTZMAN , OMER TRIPP
发明人： YAIR AMIT , ROEE HAY , ROI SALTZMAN , OMER TRIPP
IPC分类号： G06F9/44
CPC分类号： G06F17/30893 , H04L29/08981
摘要： Identifying at least one custom parameter in a request uniform resource locator (URL). The method can include identifying at least a first portion of source code of a Web application that typically consumes the custom parameter provided in the request URL and, via a processor, instrumenting the Web application at the first portion of the source code. The Web application can receive the request URL and the Web application can be executed with the instrumented source code. At least one run-time value consumed by the second portion of the source code can be identified, and the run-time value can be compared to the request URL to determine whether the run-time value intersects with the request URL. Responsive to determining that the run-time value intersects with the request URL, the run-time value can be identified as the custom parameter. A custom parameter rule can be generated based on the comparison.
摘要翻译：在请求统一资源定位符（URL）中标识至少一个自定义参数。该方法可以包括识别Web应用程序的源代码的至少第一部分，其通常消耗在请求URL中提供的自定义参数，并且经由处理器在源代码的第一部分检验Web应用程序。 Web应用程序可以接收请求URL，Web应用程序可以使用带检测的源代码执行。可以识别由源代码的第二部分消耗的至少一个运行时值，并且可以将运行时值与请求URL进行比较，以确定运行时值是否与请求URL相交。响应于确定运行时值与请求URL相交，运行时值可以被标识为自定义参数。可以根据比较生成自定义参数规则。

4. 发明申请

US20130166676A1 DETECTION OF CUSTOM PARAMETERS IN A REQUEST URL 有权
标题翻译：在请求URL中检测自定义参数
公开(公告)号：US20130166676A1
公开(公告)日：2013-06-27
申请号：US13334718
申请日：2011-12-22
申请人： YAIR AMIT , ROEE HAY , ROI SALTZMAN , OMER TRIPP
发明人： YAIR AMIT , ROEE HAY , ROI SALTZMAN , OMER TRIPP
IPC分类号： G06F15/16
CPC分类号： G06F17/30893 , H04L29/08981
摘要： Identifying at least one custom parameter in a request uniform resource locator (URL). At least a first portion of source code of a Web application that typically consumes the custom parameter provided in the request URL can be identified. The Web application can be instrumented at the first portion of the source code. The Web application can receive the request URL and the Web application can be executed with the instrumented source code. At least one run-time value consumed by the second portion of the source code can be identified, and the run-time value can be compared to the request URL to determine whether the run-time value intersects with the request URL. Responsive to determining that the run-time value intersects with the request URL, the run-time value can be identified as the custom parameter. A custom parameter rule can be generated based on the comparison.
摘要翻译：在请求统一资源定位符（URL）中标识至少一个自定义参数。可以识别通常消耗请求URL中提供的自定义参数的Web应用的源代码的至少第一部分。 Web应用程序可以在源代码的第一部分进行检测。 Web应用程序可以接收请求URL，Web应用程序可以使用带检测的源代码执行。可以识别由源代码的第二部分消耗的至少一个运行时值，并且可以将运行时值与请求URL进行比较，以确定运行时值是否与请求URL相交。响应于确定运行时值与请求URL相交，运行时值可以被标识为自定义参数。可以根据比较生成自定义参数规则。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式