Detection of second order vulnerabilities in web services
AssigneeInternational Business Machines Corporation
InventorsYair Amit, Evgeny Beskrovny, Omer Tripp
Life of this patent
Estimating the term…
Abstract
A method of detecting a vulnerability in a Web service can include determining, using a processor, whether a Web service uses identity of a requester to select one of a plurality of different paths of a branch in program code of the Web service. The method further can include, responsive to determining that the Web service does select one of a plurality of different paths of a branch according to identity of the requester, indicating that the Web service has a potential vulnerability.
Claims13
A method detecting a vulnerability in a Web service, the method comprising:
- determining, using a processor, whether a Web service uses identity of a requester to select one of a plurality of different paths of a branch in program code of the Web service;
- responsive to determining that the Web service does select one of a plurality of different paths of a branch according to identity of the requester, indicating that the Web service has a potential vulnerability;
- determining a trusted identity to which identity of the requester is compared;
- and
- submitting a payload to the Web service while impersonating the trusted identity.
A method of detecting a vulnerability in a Web service, the method comprising:
- locating a seed instruction in program code of a Web service in which identity of a requester is determined;
- determining, using a processor, whether a value from the seed instruction indicating identity of the requester is determinative in selecting between a plurality of paths for a branch in program code of the Web service;
- indicating that the Web service includes a potential vulnerability responsive to determining that the value from the seed instruction is determinative in selecting between the plurality of paths for the branch;
- and
- instrumenting the program code of the Web service with first diagnostic program code configured to determine a trusted identity to which identity of the requester is compared responsive to execution of the Web service with the first diagnostic program code to determine the trusted identity.
Dependencies are inferred from the claim text.