专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08302080B2 Automated test input generation for web applications 有权
标题翻译： Web应用程序的自动测试输入生成
公开(公告)号：US08302080B2
公开(公告)日：2012-10-30
申请号：US12249646
申请日：2008-10-10
申请人： Gary Wassermann , Dachuan Yu , Ajay Chander , Dinakar Dhurjati , Hiroshi Inamura
发明人： Gary Wassermann , Dachuan Yu , Ajay Chander , Dinakar Dhurjati , Hiroshi Inamura
IPC分类号： G06F9/44
CPC分类号： G06F11/3688 , G06F8/00
摘要： A method and apparatus is disclosed herein for automated test input generation for web applications. In one embodiment, the method comprises performing a source-to-source transformation of the program; performing interpretation on the program based on a set of test input values; symbolically executing the program; recording a symbolic constraint for each of one or more conditional expressions encountered during execution of the program, including analyzing a string operation in the program to identify one or more possible execution paths, and generating symbolic inputs representing values of variables in each of the conditional expressions as a numeric expression and a string constraint including generating constraints on string values by modeling string operations using finite state transducers (FSTs) and supplying values from the program's execution in place of intractable sub-expressions; and generating new inputs to drive the program during a subsequent iteration based on results of solving the recorded string constraints.
摘要翻译：本文公开了用于web应用的自动化测试输入生成的方法和装置。在一个实施例中，该方法包括执行程序的源到源转换; 基于一组测试输入值对程序执行解释; 象征性地执行程序; 记录在执行程序期间遇到的一个或多个条件表达中的每一个的符号约束，包括分析程序中的字符串操作以识别一个或多个可能的执行路径，以及生成表示每个条件表达式中的变量值的符号输入作为数字表达式和字符串约束，包括通过使用有限状态转换器（FST）对字符串操作建模并提供来自程序执行的值代替难处理的子表达式来生成字符串值的约束; 并且基于解决记录的字符串约束的结果，生成新的输入以在随后的迭代期间驱动程序。

2. 发明申请

US20090125976A1 AUTOMATED TEST INPUT GENERATION FOR WEB APPLICATIONS 有权
标题翻译：自动测试输入生成WEB应用程序
公开(公告)号：US20090125976A1
公开(公告)日：2009-05-14
申请号：US12249646
申请日：2008-10-10
申请人： Gary Wassermann , Dachuan Yu , Ajay Chander , Dinakar Dhurjati , Hiroshi Inamura
发明人： Gary Wassermann , Dachuan Yu , Ajay Chander , Dinakar Dhurjati , Hiroshi Inamura
IPC分类号： G06F9/44 , G06F21/00
CPC分类号： G06F11/3688 , G06F8/00
摘要： A method and apparatus is disclosed herein for automated test input generation for web applications. In one embodiment, the method comprises performing a source-to-source transformation of the program; performing interpretation on the program based on a set of test input values; symbolically executing the program; recording a symbolic constraint for each of one or more conditional expressions encountered during execution of the program, including analyzing a string operation in the program to identify one or more possible execution paths, and generating symbolic inputs representing values of variables in each of the conditional expressions as a numeric expression and a string constraint including generating constraints on string values by modeling string operations using finite state transducers (FSTs) and supplying values from the program's execution in place of intractable sub-expressions; and generating new inputs to drive the program during a subsequent iteration based on results of solving the recorded string constraints.
摘要翻译：本文公开了用于web应用的自动化测试输入生成的方法和装置。在一个实施例中，该方法包括执行程序的源到源转换; 基于一组测试输入值对程序执行解释; 象征性地执行程序; 记录在执行程序期间遇到的一个或多个条件表达中的每一个的符号约束，包括分析程序中的字符串操作以识别一个或多个可能的执行路径，以及生成表示每个条件表达式中的变量值的符号输入作为数字表达式和字符串约束，包括通过使用有限状态转换器（FST）对字符串操作建模并提供来自程序执行的值代替难处理的子表达式来生成字符串值的约束; 并且基于解决记录的字符串约束的结果，生成新的输入以在随后的迭代期间驱动程序。

3. 发明申请

US20100088678A1 METHOD AND APPARATUS FOR THE FORMAL SPECIFICATION AND ANALYSIS OF TIMING PROPERTIES IN SOFTWARE SYSTEMS 审中-公开
标题翻译：软件系统时序特征的形式规范与分析方法与装置
公开(公告)号：US20100088678A1
公开(公告)日：2010-04-08
申请号：US12569747
申请日：2009-09-29
申请人： Musab AlTurki , Dinakar Dhurjati , Dachuan Yu , Ajay Chander , Hiroshi Inamura
发明人： Musab AlTurki , Dinakar Dhurjati , Dachuan Yu , Ajay Chander , Hiroshi Inamura
IPC分类号： G06F9/44
CPC分类号： G06F8/10 , G06F11/3608
摘要： A method and apparatus is disclosed herein for formal specification and analysis of timing properties. In one embodiment, the method comprises receiving a software design that includes timing behaviors expressed in a specification language; analyzing the timing behaviors; and using abstract interpretation based static analysis to detect misuses of one or more timing constructs.
摘要翻译：本文公开了一种方法和装置，用于正时规范和时序性质的分析。在一个实施例中，该方法包括接收包括以规范语言表达的定时行为的软件设计; 分析时序行为; 并使用基于抽象解释的静态分析来检测一个或多个定时构造的滥用。

4. 发明申请

US20100223604A1 MODULE SYSTEM FOR POLYMORPHIC PI-CALCULUS 审中-公开
标题翻译：多元PI-CALCULUS的模块系统
公开(公告)号：US20100223604A1
公开(公告)日：2010-09-02
申请号：US12683930
申请日：2010-01-07
申请人： George Kuan , Dachuan Yu , Dinakar Dhurjati , Ajay Chander , Hiroshi Inamura
发明人： George Kuan , Dachuan Yu , Dinakar Dhurjati , Ajay Chander , Hiroshi Inamura
IPC分类号： G06F9/45
CPC分类号： G06F8/314
摘要： A method and apparatus is disclosed herein for using a module system for polymorphic π-calculus. In one embodiment, the method comprises receiving a formal specification of a software program; and performing automatic analysis on the formal specification using a module system fitted with processes of the polymorphic π-calculus processes.
摘要翻译：本文公开了一种使用多态性和积分的模块系统的方法和装置。在一个实施例中，该方法包括接收软件程序的正式规范; 并使用配有多态性和积分过程的过程的模块系统对形式规范进行自动分析。

5. 发明申请

US20090019525A1 DOMAIN-SPECIFIC LANGUAGE ABSTRACTIONS FOR SECURE SERVER-SIDE SCRIPTING 审中-公开
标题翻译：用于安全的服务器端口脚本的特定语言范例
公开(公告)号：US20090019525A1
公开(公告)日：2009-01-15
申请号：US12163848
申请日：2008-06-27
申请人： Dachuan Yu , Ajay Chander , Hiroshi Inamura , Igor Serikov
发明人： Dachuan Yu , Ajay Chander , Hiroshi Inamura , Igor Serikov
IPC分类号： G06F21/00 , G06F9/45 , H04L9/32
CPC分类号： G06F21/54 , H04L63/1483
摘要： A method and apparatus is disclosed herein for secure server-side programming. In one embodiment, the method comprises creating a server-side program with one or more abstractions and compiling the server-side program by translating the server-side program, including the one or more abstractions, into target code that is guaranteed to execute in a secure manner with respect to a security criteria.
摘要翻译：本文公开了一种用于安全的服务器端编程的方法和装置。在一个实施例中，该方法包括：创建具有一个或多个抽象的服务器端程序，并通过将服务器端程序（包括一个或多个抽象）翻译成保证在一个或多个抽象中执行的目标代码来编译服务器端程序有关安全标准的安全方式。

6. 发明申请

US20100257603A1 METHOD AND APPARATUS FOR DETECTING AND PREVENTING UNSAFE BEHAVIOR OF JAVASCRIPT PROGRAMS 审中-公开
标题翻译：检测和预防JAVASCRIPT程序的不安全行为的方法和装置
公开(公告)号：US20100257603A1
公开(公告)日：2010-10-07
申请号：US12753731
申请日：2010-04-02
申请人： Ajay Chander , Dachuan Yu
发明人： Ajay Chander , Dachuan Yu
IPC分类号： G06F21/00
CPC分类号： G06F21/562 , G06F21/54
摘要： A method and apparatus is disclosed herein for detecting and preventing unsafe behavior of script programs. In one embodiment, a method comprises performing static analysis of a script program based on a first safety policy to detect unsafe behavior of the script program and preventing execution of the script program if a violation of the safety policy would occur when the script program is executed.
摘要翻译：本文公开了用于检测和防止脚本程序的不安全行为的方法和装置。在一个实施例中，一种方法包括基于第一安全策略来执行脚本程序的静态分析以检测脚本程序的不安全行为，并且如果在执行脚本程序时会发生违反安全策略的情况，则阻止脚本程序的执行。

7. 发明申请

US20080083012A1 PROGRAM INSTRUMENTATION METHOD AND APPARATUS FOR CONSTRAINING THE BEHAVIOR OF EMBEDDED SCRIPT IN DOCUMENTS 审中-公开
标题翻译：程序设备方法和装置，用于限制文件中嵌入式脚本的行为
公开(公告)号：US20080083012A1
公开(公告)日：2008-04-03
申请号：US11765918
申请日：2007-06-20
申请人： Dachuan Yu , Ajay Chander , Nayeem Islam
发明人： Dachuan Yu , Ajay Chander , Nayeem Islam
IPC分类号： G06F17/30 , G06F9/44
CPC分类号： H04L63/1441 , G06F21/50 , G06F21/51 , G06F21/56 , H04L63/1483
摘要： A method and apparatus is disclosed herein for constraining the behavior of embedded script in documents using program instrumentation. In one embodiment, the method comprises downloading a document with a script program embedded therein, inspecting the script program, and rewriting the script program to cause behavior resulting from execution of the script to conform to one or more policies defining safety and security. The script program comprises self-modifying code (e.g., dynamically generated script).
摘要翻译：本文公开了一种用于使用程序仪器来限制嵌入式脚本在文档中的行为的方法和装置。在一个实施例中，该方法包括下载具有嵌入其中的脚本程序的文档，检查脚本程序以及重写脚本程序以引起由脚本的执行引起的行为以符合定义安全性和安全性的一个或多个策略。脚本程序包括自修改代码（例如，动态生成的脚本）。

8. 发明授权

US09686288B2 Method and apparatus for constructing security policies for web content instrumentation against browser-based attacks 有权
公开(公告)号：US09686288B2
公开(公告)日：2017-06-20
申请号：US12323359
申请日：2008-11-25
申请人： Haruka Kikuchi , Dachuan Yu , Ajay Chander
发明人： Haruka Kikuchi , Dachuan Yu , Ajay Chander
IPC分类号： H04L29/06 , G06F21/54
CPC分类号： H04L63/102 , G06F21/54 , H04L63/14
摘要： A method and apparatus is disclosed herein for constructing security policies for content instrumentation against attacks. In one embodiment, the method comprises constructing one or more security policies for web content using at least one rewriting template, at least one edit automata policy, or at least one policy template; and rewriting a script program in a document to cause behavior resulting from execution of the script to conform to the one or more policies.

9. 发明申请

US20070107057A1 Method and apparatus for detecting and preventing unsafe behavior of javascript programs 审中-公开
标题翻译：用于检测和防止JavaScript程序不安全行为的方法和装置
公开(公告)号：US20070107057A1
公开(公告)日：2007-05-10
申请号：US11594524
申请日：2006-11-07
申请人： Ajay Chander , Dachuan Yu
发明人： Ajay Chander , Dachuan Yu
IPC分类号： G06F12/14
CPC分类号： G06F21/562 , G06F21/54
摘要： A method and apparatus is disclosed herein for detecting and preventing unsafe behavior of script programs. In one embodiment, a method comprises performing static analysis of a script program based on a first safety policy to detect unsafe behavior of the scrip program and preventing execution of the script program if a violation of the safety policy would occur when the script program is executed.
摘要翻译：本文公开了用于检测和防止脚本程序的不安全行为的方法和装置。在一个实施例中，一种方法包括基于第一安全策略来执行脚本程序的静态分析以检测脚本程序的不安全行为，并且如果在执行脚本程序时将发生违反安全策略的情况，则阻止脚本程序的执行。

10. 发明申请

US20090193497A1 METHOD AND APPARATUS FOR CONSTRUCTING SECURITY POLICIES FOR WEB CONTENT INSTRUMENTATION AGAINST BROWSER-BASED ATTACKS 有权
标题翻译：构建基于浏览器的攻击的WEB内容的安全策略的方法和装置
公开(公告)号：US20090193497A1
公开(公告)日：2009-07-30
申请号：US12323359
申请日：2008-11-25
申请人： Haruka Kikuchi , Dachuan Yu , Ajay Chander
发明人： Haruka Kikuchi , Dachuan Yu , Ajay Chander
IPC分类号： G06F21/00
CPC分类号： H04L63/102 , G06F21/54 , H04L63/14
摘要： A method and apparatus is disclosed herein for constructing security policies for content instrumentation against attacks. In one embodiment, the method comprises constructing one or more security policies for web content using at least one rewriting template, at least one edit automata policy, or at least one policy template; and rewriting a script program in a document to cause behavior resulting from execution of the script to conform to the one or more policies.
摘要翻译：本文公开了一种用于构建针对攻击的内容检测的安全策略的方法和装置。在一个实施例中，该方法包括使用至少一个重写模板，至少一个编辑自动机策略或至少一个策略模板来构建用于web内容的一个或多个安全策略; 并在文档中重写脚本程序以引起由脚本的执行产生的行为以符合一个或多个策略。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式