公开(公告)号：US20190132348A1

公开(公告)日：2019-05-02

申请号：US15799575

申请日：2017-10-31

Applicant: EntIT Software LLC

Inventor： Ming Sum Sam Ng ,  Sasi Siddharth Muthurajan ,  Nidhi Govindram Kejriwal ,  Gerald E. Sullivan, II ,  Alexander Hoole

IPC: H04L29/06 ,  G06F21/53 ,  H04L9/32

Abstract: A method includes: identifying, by a runtime instrumentation agent of a web server, a plurality of attack surfaces of a web application executed on the web server; generating, by the runtime instrumentation agent, a plurality of hash values, where each hash value is generated based on one of the plurality of attack surfaces; and transmitting, by the runtime instrumentation agent, the plurality of hash values to an attack server external to the web server, where the attack server is to determine whether to scan each attack surface based on the plurality of hash values.

公开(公告)号：US11695793B2

公开(公告)日：2023-07-04

申请号：US15799575

申请日：2017-10-31

Applicant: EntIT Software LLC

Inventor： Ming Sum Sam Ng ,  Sasi Siddharth Muthurajan ,  Nidhi Govindram Kejriwal ,  Gerald E. Sullivan, II ,  Alexander Hoole

IPC: H04L9/40 ,  G06F21/53 ,  H04L9/32 ,  G06F21/55

CPC classification number: H04L63/1433 ,  G06F21/53 ,  G06F21/552 ,  H04L9/3239 ,  H04L9/3242 ,  G06F2221/033 ,  G06F2221/2149 ,  H04L2209/26

Abstract: A method includes: identifying, by a runtime instrumentation agent of a web server, a plurality of attack surfaces of a web application executed on the web server; generating, by the runtime instrumentation agent, a plurality of hash values, where each hash value is generated based on one of the plurality of attack surfaces; and transmitting, by the runtime instrumentation agent, the plurality of hash values to an attack server external to the web server, where the attack server is to determine whether to scan each attack surface based on the plurality of hash values.