Systems and methods of intelligent and directed dynamic application security testing
AssigneeSynopsys, Inc.
InventorsJoseph Feiman, Eric Sheridan, Prabhuram Mohan
Life of this patent
Estimating the term…
Abstract
Disclosed are systems, methods and computer readable mediums for intelligent and directed dynamic application security testing. The systems, methods and computer-readable mediums can be configured to receive an attack location and an attack type for a web-application, transmit the attack location and attack type to a ID-DAST platform, receive from the ID-DAST platform a payload, attack the web-application using the payload, and receive results of the attack.
Claims20
A system for intelligent directed dynamic application security testing, the system comprising:
- a processor;
- and
- a computer-readable medium storing instructions, which when executed by the processor causes the processor to:
- receive an attack scenario for at least one of a web-application or a microservice;
- transmit to a platform the attack scenario;
- receive from the platform a payload;
- attack the web-application or the microservice using the payload;
- and
- receive results of the attack, wherein the attack scenario comprises at least an attack location and an attack type, wherein detection and identification of the attack location and the attack type are provided by a non-crawling source.
A non-transitory computer-readable medium storing instructions, which when executed by at least one processor causes the at least one processor to:
- receive an attack scenario for at least one of a web-application or a microservice;
- transmit to a platform the attack scenario;
- receive from the platform a payload;
- attack the web-application or microservice using the payload;
- and
- receive results of the attack, wherein the attack scenario comprises at least an attack location and an attack type, wherein detection and identification of the attack location and the attack type are provided by a non-crawling source.
A method comprising:
- receiving an attack scenario for at least one of a web-application or a microservice;
- transmitting to a platform the attack scenario;
- receiving from the platform a payload;
- attacking the web-application or microservice using the payload;
- and
- receiving results of the attack, wherein the attack scenario comprises at least an attack location and an attack type, wherein detection and identification of the attack location and the attack type are provided by a non-crawling source.
Dependencies are inferred from the claim text.