利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

6 条记录 (耗时 0.008 秒)

    CODE INSTRUMENTATION FOR RUNTIME APPLICATION SELF-PROTECTION
    1.
    发明公开
    CODE INSTRUMENTATION FOR RUNTIME APPLICATION SELF-PROTECTION 审中-公开
    运行时应用程序自我保护的代码工具

    公开(公告)号：EP3241135A1

    公开(公告)日：2017-11-08

    申请号：EP15875340.0

    申请日：2015-12-24

    申请人： Checkmarx Ltd.

    发明人： ESHKENAZI, Shimon ,  SIMAN, Maty ,  ROICHMAN, Alexander

    IPC分类号： G06F21/12

    CPC分类号： G06F21/51 ,  G06F8/75 ,  G06F9/328 ,  G06F9/44568 ,  G06F21/12 ,  G06F21/52

    摘要： A method for runtime self-protection of an application program includes, before running the application program, identifying input and output points in runtime code (24) of the program. The input points are instrumented so as to cause the program to sense and cache potentially malicious inputs to the program. The output points are instrumented so as to cause the program to detect outputs from the program corresponding to the cached inputs. While running the application program, upon detecting, at an instrumented output point, an output corresponding to a cached input, a vulnerability of a target of the output to the cached input is evaluated. A protective action is invoked upon determining that the output is potentially vulnerable to the cached input.

    RASP FOR SCRIPTING LANGUAGES
    3.
    发明公开
    RASP FOR SCRIPTING LANGUAGES 审中-公开
    RASP用于描述语言

    公开(公告)号：EP3245776A1

    公开(公告)日：2017-11-22

    申请号：EP16737140.0

    申请日：2016-01-11

    申请人： Checkmarx Ltd.

    发明人： ROICHMAN, Alexander

    IPC分类号： H04L29/06 ,  G06F9/44 ,  G06F11/00 ,  G06F21/00

    CPC分类号： G06F21/54 ,  G06F8/658 ,  G06F21/577 ,  G06F2221/033 ,  H04L63/1433

    摘要： A method for runtime analysis of a software program (24) written in a scripting language. The method includes, before running the software program, adding patching code in the scripting language to the software program so as to define a proxy method that is to run in place of an existing method in the software program and comprises logic configured to provide information that is associated with operation of the existing method at runtime. Upon running the software program with the added patching code on a computer 32, the information provided by the logic in the proxy method is received and acted upon.

    INTEGRATED INTERACTIVE APPLICATION SECURITY TESTING
    4.
    发明公开
    INTEGRATED INTERACTIVE APPLICATION SECURITY TESTING 审中-公开

    公开(公告)号：EP3433782A1

    公开(公告)日：2019-01-30

    申请号：EP17769530.1

    申请日：2017-03-07

    申请人： Checkmarx Ltd.

    发明人： ROICHMAN, Alexander ,  SIMAN, Maty ,  ESHKENAZI, Shimon

    IPC分类号： G06F21/00 ,  G06F11/30

    摘要： A method for testing a software application program (22) includes recording a sequence of functional tests (28) that are applied to the program and automatically identifying and collapsing sessions within the recorded functional tests. Modified tests are created by replacing parameters in the collapsed sessions with malicious inputs. The modified tests are applied to the program in order to detect security vulnerabilities in the program.