公开(公告)号：US20170223042A1

公开(公告)日：2017-08-03

申请号：US15500527

申请日：2014-09-29

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Sasi Siddharth MUTHURAJAN ,  Ronald Joseph SECHMAN

IPC: H04L29/06 ,  H04L12/58

CPC classification number: H04L63/1433 ,  H04L51/12 ,  H04L51/28 ,  H04L51/30 ,  H04L63/1425 ,  H04L63/1483

Abstract: Examples relate to detection of email-related vulnerabilities. The examples disclosed herein enable monitoring, at a runtime, application programming interface (API) calls made by a server-based application for the API calls related to at least one of a plurality of email protocols. A request to obtain a first set of data indicating a result of a vulnerability attack may be received from a vulnerability scanner. The examples disclosed herein enable identifying, at the runtime, an API call that has been made based on the vulnerability attack in response to receiving the request. The first set of data may be obtained, at the runtime, based on the API call. The examples disclosed herein further enable providing the first set of data to the vulnerability scanner to detect a vulnerability in the first set of data.

公开(公告)号：US20170223043A1

公开(公告)日：2017-08-03

申请号：US15500529

申请日：2014-11-26

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Alvaro Munoz ,  Sasi Siddharth MUTHURAJAN

IPC: H04L29/06 ,  H04L12/26 ,  G06F21/55 ,  G06F21/57

CPC classification number: H04L63/1433 ,  G06F21/552 ,  G06F21/556 ,  G06F21/577 ,  G06F2221/033 ,  H04L43/12 ,  H04L63/1416 ,  H04L63/145 ,  H04L63/1483 ,  H04L63/20

Abstract: Example embodiments disclosed herein relate to determination of vulnerability of an application under test using a runtime agent and network sniffer during a security test. A runtime agent monitors execution of an application under test. A network sniffer is used to identify a probe value for determination of the vulnerability.