US 10,375,026 B2Granted

Web transaction status tracking

AssigneeShape Security, Inc.

InventorsSiying Yang, Justin D. Call

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems, methods, and other techniques for improving the operation of computing systems are described. Some implementations include a computer-implemented method. The method can include intercepting, at an intermediary computing system, messages communicated between a web server system and one or more client computing devices. A subset of the intercepted messages can be selected that are determined to commonly relate to a particular web transaction. The method can identify an expression pattern that occurs in the subset of the intercepted messages, and can determine that the identified expression pattern matches a first pre-defined expression pattern from among a plurality of different pre-defined expression patterns. A status of the particular web transaction can be determined based on the first pre-defined expression pattern that matches the identified expression pattern occurring in the subset of the intercepted messages. Information can be stored that indicates the determined status of the particular web transaction.

Claims33

Dependent claims

A computer-implemented method, comprising:

intercepting, at an intermediary computing system, first response messages comprising web code for web page content served by a web server system to client computing devices in response to first operations of a particular operation type when the first operations have a successful completion state;
determining a first expression pattern with at least one wildcard value that occurs in the web code of the web page content of each of the first response messages served in response to the first operations when the first operations have the successful completion state;
storing a first mapping from the first expression pattern to a success status for the particular operation type;
intercepting, at the intermediary computing system, second response messages comprising web code for web page content served by the web server system to the client computing devices in response to second operations of the particular operation type when the second operations have an unsuccessful completion state;
determining a second expression pattern with at least one wildcard value that occurs in the web code of the web page content of each of the second response messages served in response to the second operations when the second operations have the unsuccessful completion state;
storing a second mapping from the second expression pattern to a non-success status for the particular operation type;
based on a set of mappings comprising the first mapping and the second mapping, determining a status for each operation of a set of operations of the particular operation type based on matching one or more expression patterns in the set of mappings to web code for one or more web page content served by the web server system in response to the set of operations;
updating aggregate status information for the particular operation type based on the status for the set of operations;
and
based on the aggregate status information corresponding to the particular operation type, performing an appropriate action;
wherein the method is performed by one or more computing devices.

8 more elements

A computer system for identifying and blocking unauthorized requests based on request volume comprising:

one or more hardware processors;
a memory coupled to the one or more hardware processors and storing one or more instructions which, when executed by the one or more hardware processors, cause the one or more hardware processors to:
intercept, at an intermediary computing system, first response messages comprising web code for web page content served by a web server system to one or more client computing devices in response to first, operations of a particular operation type when the first operations have a successful completion state;
determine a first expression pattern with at least one wildcard value that occurs in the web code of the web page content of each of the first response messages served in response to the first operations when the first operations have the successful completion state;
store a first mapping from the first expression pattern to a success status for the particular operation type;
intercepting, at the intermediary computing system, second response messages comprising web code for page content served by the web server system to the client computing devices in response to second operations of the particular operation type when the second operations have an unsuccessful completion state;
determine a second expression pattern with at least one wildcard value that occurs in the web code of the web page content of each of the second response messages served in response to the second operations when the second operations have the unsuccessful completion state;
store a second mapping from the second expression pattern to a non-success status for the particular operation type;
based on a set of mappings comprising the first mapping and the second mapping, determine a status for each operation of a set of operations of the particular operation type based on matching one or more expression patterns in the set of mappings to web code for one or more web page content served by the web server system in response to the set of operations;
updating aggregate status information for the particular operation type based on the status for the set of operations;
and
corresponding to and based on the aggregate status information for the particular operation type, performing an appropriate action.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/925,547Filed 28 Oct 2015
Published: US 2017/0126627 A14 May 2017
Granted: 6 Aug 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 63/0281
For separating internal from external traffic, e.g. firewalls: proxies
H04L 63/1416
By monitoring network traffic: event detection, e.g. attack signature detection
H04L 63/1483
Countermeasures against malicious traffic: service impersonation, e.g. phishing, pharming or web spoofing
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general

Family

US 2017/0126627 A1Pre-grant publication · published 4 May 2017
US 10,375,026 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key