公开(公告)号：US20170220805A1

公开(公告)日：2017-08-03

申请号：US15500523

申请日：2014-09-25

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Sam NG ,  Ronald J. SECHMAN ,  Matias MADOU

IPC: G06F21/57 ,  H04L29/06 ,  G06F11/36 ,  G06F21/52

CPC classification number: G06F21/577 ,  G06F11/3692 ,  G06F21/52 ,  G06F2221/033 ,  H04L63/1433

Abstract: Example embodiments disclosed herein relate to determining a secure activity of an application under test (AUT). Execution of an application under test is monitored. During an attack vector, an application programming interface associated with a secure activity is determined. A message is sent to a security test that secure activity occurred.

公开(公告)号：US20170220804A1

公开(公告)日：2017-08-03

申请号：US15500521

申请日：2014-09-04

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Sasi MUTHURAJAN ,  Matias MADOU ,  Ronald J. SECHMAN ,  Jeremy BROOKS

IPC: G06F21/57 ,  H04L29/08 ,  G06F11/36 ,  G06F21/52 ,  H04L29/06

CPC classification number: G06F21/577 ,  G06F11/3692 ,  G06F21/52 ,  G06F2221/033 ,  G06F2221/2101 ,  G06F2221/2103 ,  H04L63/1433 ,  H04L67/02

Abstract: Example embodiments disclosed herein relate to determining whether a protective measure meeting criteria has been performed on data. Execution of an application under test (AUT) is monitored. A message that a field of the AUT should be considered sensitive is received. Data is determined to be entered into the field. The data is monitored during execution of the AUT to determine whether the protective measure that meets the criteria has been performed on the data.

公开(公告)号：US20170200013A1

公开(公告)日：2017-07-13

申请号：US15327174

申请日：2014-07-18

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Ronald J. SECHMAN ,  Prajakta JAGDALE ,  Sasi MUTHURAJAN ,  Nidhi KEJRIWAL

IPC: G06F21/57

Abstract: Example embodiments disclosed herein relate to determining terms for a security test. Terms associated with an application under test are determined. The terms are filtered with words in a dictionary to generate a filtered set or wordlist. The set or wordlist is used for input to the application under test for the security test.

公开(公告)号：US20170187743A1

公开(公告)日：2017-06-29

申请号：US15312645

申请日：2014-05-20

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Matias Madou ,  Ronald J. SECHMAN ,  Sam NG MING SUM

IPC: H04L29/06

CPC classification number: H04L63/1433 ,  G06F21/566 ,  G06F21/577 ,  G06F2221/033 ,  H04L63/1441

Abstract: Example embodiments disclosed herein relate to generating a point-wise protection based on dynamic security analysis. Vulnerability solution recommendation are provided based on the dynamic security analysis. A point-wise protection is generated based on a selection of the vulnerability solution recommendation.

公开(公告)号：US20170103211A1

公开(公告)日：2017-04-13

申请号：US15317206

申请日：2014-06-19

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Matias MADOU ,  Ronald J. SECHMAN ,  Sam NG MING SUM

IPC: G06F21/57 ,  G06F11/36

Abstract: Example embodiments disclosed herein relate to an approach for installing a runtime agent during a security test. A security test is initiated or performed on an application under test executing on a server. An application vulnerability associated with the application under test is determined. The application vulnerability is exploited to install the runtime agent on the server. The security test is continued using the runtime agent to receive additional information about the application under test.