Back to results
US 11,108,808 B1Granted
Systems and methods of web application security control governance
AssigneeWells Fargo Bank, N.A.
InventorChristopher Patrick Wells
Life of this patent
Estimating the term…
Abstract
Attacks with inserted data may be greatly thwarted with the disclosed innovation featuring systems and methods of using a governor. A governor may act directly in in-line processing to reduce and limit attack surfaces, enforcing validators pre-selected by applications and/or, in the absence of application preselection, selecting and validating validators separately. The applicability of such a technical improvement to system operations improves the technical operations of most any system with one or more applications that accept potential attack surface items, such as data, data fields and/or data types, from “open” or uncontrolled sources.
Claims18
A system for reducing attack surface item risk potential, comprising:
- a plurality of webpage/forms configured to:
- receive potential attack surface items from an external source,
- receive internally generated potential attack surface items, and
- communicate to a plurality of applications;
- a plurality of application services that are linked to a subset of the plurality of applications and configured to validate potential attack surface items;
- and
- a governor configured to:
- control data traffic between the plurality of webpage/forms and the plurality of applications,
- determine validating application services associated with a first set of one or more applications to a second set of one or more applications to control operations in cases that more than one application from the first set and the second set is associated with a subset of the plurality of webpage/forms,
- apply the validating application services, and
- provision micro services that comprise operations to inspect, identify, catalogue and/or track application validation protocols, and that are applied in a development phase of one or more applications.
8 more elements
A system for governing a plurality of webpage/form applications, comprising:
- a profiler configured to:
- inspect system components to determine attack surface item potential occurrences, identify and catalogues potential attack surface items associated with the potential occurrences,
- identify and catalogue calls to a plurality of validating application service items within the plurality of webpage/form applications and a plurality of webpage/forms that may receive the potential attack surface items from an external source;
- and a validator component configured to:
- enforce a convention for the plurality of webpage/form applications within the system;
- operate a certificate/signatory component that controls the plurality of webpage/form applications through attestations of validations occurring for the attack surface item potential occurrences according to the convention;
- and
- determine and apply a subset of the validating application service items from a first set of the plurality of webpage/form applications to a second set of the plurality of webpage/form applications in cases that more than one application from the first set and the second set is associated with a subset of the plurality of webpage/forms;
- wherein the one or more webpage/forms receives internally generated potential attack surface items and a governor provisions micro services;
- wherein the micro service provisions comprise operations to inspect, identify, catalogue and/or track application validation protocols, and wherein the micro service provisions are applied in a development phase of one or more applications.
7 more elements
A method of for reducing attack surface item risk potential, comprising:
- interrogating, by a governor, a plurality of applications and a plurality of webpage/forms associated with the applications,
- demarcating, by the governor, potential attack surface items within the webpage/forms;
- and
- resolving, by the governor, validators verifying application treatment of potential attack surface items wherein the resolving comprises:
- matching predetermined validators to the application treatment,
- determining the validating by the predetermined validators has occurred, wherein the determining comprises:
- applying a subset of validating application service items from a first set of the plurality of applications to a second set of the plurality of applications, for controlling operations in cases that more than one of the plurality of applications from the first set and the second set is associated with a subset of the plurality of webpage/forms;
- wherein if validators have not validated the demarcated potential attack surface items, applying, by the governor, predetermined selected controls to the plurality of applications and the potential attack surface items;
- wherein the one or more webpage/forms receives internally generated potential attack surface items and the governor provisions micro services:
- wherein the micro service provisions comprise operations to inspect, identify, catalogue and/or track application validation protocols, and wherein the micro service provisions are applied in a development phase of one or more applications.
7 more elements
Dependencies are inferred from the claim text.