Back to results
US 10,182,068 B2Granted
Determine vulnerability using runtime agent and network sniffer
AssigneeEntit Software LLC
InventorsAlvaro Munoz, Sasi Siddharth Muthurajan
Life of this patent
Estimating the term…
Abstract
Example embodiments disclosed herein relate to determination of vulnerability of an application under test using a runtime agent and network sniffer during a security test. A runtime agent monitors execution of an application under test. A network sniffer is used to identify a probe value for determination of the vulnerability.
Claims15
A computing system comprising:
- a runtime agent engine to monitor an application under test (AUT) executing at a server during a security test;
- a network sniffer engine,
- wherein the runtime agent engine receives a notification from the security test of an identifiable probe value,
- wherein the runtime agent engine communicates the identifiable probe value to the network sniffer engine,
- wherein the network sniffer engine monitors communication traffic from the AUT,
- wherein the network sniffer engine identifies the identifiable probe value,
- wherein the network sniffer engine provides an indication to the runtime agent engine that the identifiable probe value was identified, and
- wherein the runtime agent engine provides the indication to the security test, and wherein the security test is to determine a potential AUT vulnerability based, at least in part, on the indication.
5 more elements
A non-transitory machine-readable storage medium storing instructions for facilitating detection of vulnerability that, if executed by at least one processor of a computing system, cause the computing system to:
- monitor, at a runtime agent, execution of an application under test executing at the device during a security test;
- receive notification from the security test of an identifiable probe value;
- send the identifiable probe value to a network sniffer to monitor at least one external communication of the application under test;
- receive indication from the network sniffer that the network sniffer has identified the identifiable probe value;
- and
- provide indication to the security test that the network sniffer has identified the identifiable probe value.
3 more elements
A method comprising:
- monitoring, via a runtime agent, an application under test (AUT) executing at a server during a security test;
- receiving, at the runtime agent, a notification from the security test of an identifiable probe value,
- communicating, by the runtime agent, the identifiable probe value to a network sniffer, wherein the network sniffer monitors communication traffic from the AUT,
- identifying, at the network sniffer, the identifiable probe value during the security test,
- providing, by the network sniffer, data to the runtime agent engine indicating that the identifiable probe value was identified,
- wherein the runtime agent provides the data to the security test, and
- wherein the security test is to determine a potential AUT vulnerability based, at least in part, on the indication.
4 more elements
Dependencies are inferred from the claim text.