公开(公告)号：US10650148B2

公开(公告)日：2020-05-12

申请号：US15500521

申请日：2014-09-04

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Sasi Muthurajan ,  Matias Madou ,  Ronald J. Sechman ,  Jeremy Brooks

IPC: G06F21/00 ,  G06F21/57 ,  H04L29/06 ,  H04L29/08 ,  G06F21/52 ,  G06F11/36

Abstract: Example embodiments disclosed herein relate to determining whether a protective measure meeting criteria has been performed on data. Execution of an application under test (AUT) is monitored. A message that a field of the AUT should be considered sensitive is received. Data is determined to be entered into the field. The data is monitored during execution of the AUT to determine whether the protective measure that meets the criteria has been performed on the data.

公开(公告)号：US10242199B2

公开(公告)日：2019-03-26

申请号：US15031454

申请日：2014-01-31

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Sasi Siddharth Muthurajan ,  Matias Madou ,  Prajakta Jagdale ,  Jeremy Brooks

IPC: G06F21/57 ,  H04L29/06

Abstract: Example embodiments disclosed herein relate to a security test. A crawl of an application under test (AUT) is performed to determine an attack surface using crawl sessions. One or more parameters of the attack surface are probed during the respective crawl sessions. A trace is requested from an observer for the probe of the one or more parameters. Attack suggestions are received from the observer based on the trace of the one or more parameters.

公开(公告)号：US20160267277A1

公开(公告)日：2016-09-15

申请号：US15031454

申请日：2014-01-31

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Sasi Siddharth Muthurajan ,  Matias Madou ,  Prajakta Jagdale ,  Jeremy Brooks

IPC: G06F21/57

CPC classification number: G06F21/577 ,  G06F2221/033

Abstract: Example embodiments disclosed herein relate to a security test. A crawl of an application under test (AUT) is performed to determine an attack surface using crawl sessions. One or more parameters of the attack surface are probed during the respective crawl sessions. A trace is requested from an observer for the probe of the one or more parameters. Attack suggestions are received from the observer based on the trace of the one or more parameters.

Abstract translation: 本文公开的示例实施例涉及安全测试。 执行被测试应用程序（AUT）的爬取，以使用爬网会话确定攻击面。 攻击表面的一个或多个参数在相应的爬网会话期间被探测。 从观察者请求跟踪以探测一个或多个参数。 基于一个或多个参数的跟踪，从观察者接收到攻击建议。