公开(公告)号：US20170187743A1

公开(公告)日：2017-06-29

申请号：US15312645

申请日：2014-05-20

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Matias Madou ,  Ronald J. SECHMAN ,  Sam NG MING SUM

IPC: H04L29/06

CPC classification number: H04L63/1433 ,  G06F21/566 ,  G06F21/577 ,  G06F2221/033 ,  H04L63/1441

Abstract: Example embodiments disclosed herein relate to generating a point-wise protection based on dynamic security analysis. Vulnerability solution recommendation are provided based on the dynamic security analysis. A point-wise protection is generated based on a selection of the vulnerability solution recommendation.

公开(公告)号：US20170185784A1

公开(公告)日：2017-06-29

申请号：US15312644

申请日：2014-05-20

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Matias MADOU ,  Ronald SECHMAN ,  Sam NG MING SUM

IPC: G06F21/57 ,  H04L29/06 ,  G06F21/54

CPC classification number: G06F21/577 ,  G06F21/54 ,  G06F2221/033 ,  H04L63/1433

Abstract: Example embodiments disclosed herein relate to generating a point-wise protection based capable of being implemented using a runtime agent. Security information including line of code information associated with possible vulnerabilities are processed to determine vulnerability solution recommendations. A vulnerability solution recommendation is presented. The point-wise protection is generated based on a selection input for the vulnerability solution recommendation, where the point-wise protection is capable of being implemented using a runtime agent.

公开(公告)号：US20170103211A1

公开(公告)日：2017-04-13

申请号：US15317206

申请日：2014-06-19

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Matias MADOU ,  Ronald J. SECHMAN ,  Sam NG MING SUM

IPC: G06F21/57 ,  G06F11/36

Abstract: Example embodiments disclosed herein relate to an approach for installing a runtime agent during a security test. A security test is initiated or performed on an application under test executing on a server. An application vulnerability associated with the application under test is determined. The application vulnerability is exploited to install the runtime agent on the server. The security test is continued using the runtime agent to receive additional information about the application under test.