Methods for improving web scanner accuracy and devices thereof
AssigneeF5, Inc.
InventorsRon Talmor, Ido Breger, Barak Amar, Guy Nir
Life of this patent
Estimating the term…
Abstract
A method, non-transitory computer readable medium, and device that assists with improving web scanner accuracy includes receiving a sitemap document associated with a webpage from an application security manager apparatus. The received sitemap document associated with the webpage is scanned. Next, one or more vulnerabilities are identified in the scanned sitemap associated with the webpage. A report including the identified one or more vulnerabilities is provided.
Claims16
A method for web scanning, the method implemented by a network traffic management system comprising one or more application security apparatuses, web scanner apparatuses, client devices, or server devices, and the method comprising:
- determining when there are one or more changes in a webpage requested by a client and retrieved from a server based on a comparison of one or more portions of the webpage with stored information associated with a previous scan of the webpage;
- generating a sitemap document associated with the webpage, when the determination indicates that there are one or more changes in the webpage, wherein the sitemap document is a structure of the webpage with identified changes between the one or more portions of the webpage with the stored information associated with the previous scan of the webpage;
- and
- scanning the sitemap document to determine when there are one or more vulnerabilities associated with the webpage based on one or more uniform resource locators (URLs) in the sitemap document that are associated with the one or more changes, wherein when the determination indicates that there are one or more vulnerabilities associated with the webpage:
- modifying one or more security policies based on the identified one or more vulnerabilities;
- and
- executing a corrective action, prior to sending the webpage to the client and based on the modified one or more security policies, to patch the one or more vulnerabilities by removing content of the webpage that is associated with the one or more vulnerabilities.
A non-transitory computer readable medium having stored thereon instructions for web scanning comprising machine executable code which when executed by at least one processor, causes the processor to:
- determine when there are one or more changes in a webpage requested by a client and retrieved from a server based on a comparison of one or more portions of the webpage with stored information associated with a previous scan of the webpage;
- generate a sitemap document associated with the webpage, when the determination indicates that there are one or more changes in the webpage, wherein the sitemap document is a structure of the webpage with identified changes between the one or more portions of the webpage with the stored information associated with the previous scan of the webpage;
- and
- scan the sitemap document to determine when there are one or more vulnerabilities associated with the webpage based on one or more uniform resource locators (URLs) in the sitemap document that are associated with the one or more changes, and when the determination indicates that there are one or more vulnerabilities associated with the webpage:
- modify one or more security policies based on the identified one or more vulnerabilities;
- and
- execute a corrective action, prior to sending the webpage to the client and based on the modified one or more security policies, to patch the one or more vulnerabilities by removing content of the webpage that is associated with the one or more vulnerabilities.
An application security apparatus, comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
- determine when there are one or more changes in a webpage requested by a client and retrieved from a server based on a comparison of one or more portions of the webpage with stored information associated with a previous scan of the webpage;
- generate a sitemap document associated with the webpage, when the determination indicates that there are one or more changes in the webpage, wherein the sitemap document is a structure of the webpage with identified changes between the one or more portions of the webpage with the stored information associated with the previous scan of the webpage;
- and
- scan the sitemap document to determine when there are one or more vulnerabilities associated with the webpage based on one or more uniform resource locators (URLs) in the sitemap document that are associated with the one or more changes, and when the determination indicates that there are one or more vulnerabilities associated with the webpage:
- modify one or more security policies based on the identified one or more vulnerabilities;
- and
- execute a corrective action, prior to sending the webpage to the client and based on the modified one or more security policies, to patch the one or more vulnerabilities by removing content of the webpage that is associated with the one or more vulnerabilities.
A network traffic management system, comprising one or more application security apparatuses, web scanner apparatuses, client devices, or server devices with memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
- determine when there are one or more changes in a webpage requested by a client and retrieved from a server based on a comparison of one or more portions of the webpage with stored information associated with a previous scan of the webpage;
- generate a sitemap document associated with the webpage, when the determination indicates that there are one or more changes in the webpage, wherein the sitemap document is a structure of the webpage with identified changes between the one or more portions of the webpage with the stored information associated with the previous scan of the webpage;
- and
- scan the sitemap document to determine when there are one or more vulnerabilities associated with the webpage based on one or more uniform resource locators (URLs) in the sitemap document that are associated with the one or more changes, and when the determination indicates that there are one or more vulnerabilities associated with the webpage:
- modify one or more security policies based on the identified one or more vulnerabilities;
- and
- execute a corrective action, prior to sending the webpage to the client and based on the modified one or more security policies, to patch the one or more vulnerabilities by removing content of the webpage that is associated with the one or more vulnerabilities.
Dependencies are inferred from the claim text.