公开(公告)号：US11057395B2

公开(公告)日：2021-07-06

申请号：US15128501

申请日：2014-03-24

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Ming Sum Sam Ng ,  Ronald Joseph Sechman ,  Matias Madou

IPC: H04L29/06 ,  G06F21/57 ,  G06F21/31 ,  G06F21/41 ,  G06F21/10 ,  H04L29/08 ,  H04L12/26 ,  H04L29/12

Abstract: Information stored in a Hypertext Transfer Protocol (HTTP) session is monitored. Based on the monitoring, authentication information in the information stored in the HTTP session is identified.

公开(公告)号：US20180268136A1

公开(公告)日：2018-09-20

申请号：US15544357

申请日：2015-01-30

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Ming Sum Sam Ng ,  Oleksandr Mirosh ,  Siddharth Muthurajan

IPC: G06F21/55 ,  G06F17/30

CPC classification number: G06F21/554 ,  G06F16/2425 ,  G06F16/24564 ,  G06F2221/033 ,  G06F2221/2115

Abstract: Examples relate to protection against database injection attacks. The examples disclosed herein enable intercepting a current database query prior to being executed by a database management system (DBMS). The examples disclosed herein further enable determining whether the current database query is suspected of having a security threat of a database injection attack by comparing the current database query with past database queries that have been intercepted prior to the interception of the current database query, and in response to determining that the current database query is not suspected of having the security threat of the database injection attack, storing the current database query in an allowed query list.