Automated security threat testing of web pages
AssigneeOracle International Corporation
InventorsLarry Apfelbaum, Henry Houh, Thomas Mayberry, George Friedman
Life of this patent
Estimating the term…
Abstract
A method of security testing a web application is presented. The method identifies a web application to be tested, determines potential security vulnerabilities of the web application, generates one or more security tests for testing the potential vulnerabilities, and executes the security test on the web application. The results of the security testing are then used to make the web application less vulnerable to security attacks.
Claims24
A method of security testing a web application comprising:
- identifying a web application to be tested;
- identifying potential security vulnerabilities of the web application;
- generating a security test for testing at least one of said potential vulnerabilities;
- executing said security test on said web application;
- and
- analyzing results of said executing said security test.
A computer program product comprising a computer usable medium having computer readable code thereon for security testing of a web application comprising:
- instructions for identifying a web application to be tested;
- instructions for identifying potential security vulnerabilities of the web application;
- instructions for generating a security test for testing at least one of said potential vulnerabilities;
- instructions for executing said security test on said web application;
- and
- instructions for analyzing results of said executing said security test.
Dependencies are inferred from the claim text.