US 2006/0150253 A1 · Security Component for a Computing Device

Abstract

A security component determines whether a request for a resource poses a security risk to a computing device and verifies the integrity of the requested resource before the request is allowed. For a request having arguments and a resource path with a filename that identifies the resource, the security component determines that the request does not pose a security risk if the resource path does not exceed a maximum number of characters, individual arguments do not exceed a maximum number of characters, the arguments combined do not exceed a maximum number of characters, and the filename has a valid extension. The security component verifies the integrity of a requested resource by formulating a descriptor corresponding to the resource and comparing the descriptor with a cached descriptor corresponding to the resource.

Claims20

Dependent claims

A network system, comprising:

a first device to maintain an original resource;
a second device to maintain a replica resource remotely from the first device, the replica resource being replicated from the original resource;
memory to store a cached descriptor corresponding to the original resource;
a security component to determine whether a request for the replica resource will pose a security risk to the second device where the request designates a resource locator, the security component further configured to determine whether the replica resource will pose a security risk to the second device upon receipt of a request for the replica resource, the security component configured to:
formulate a descriptor corresponding to the replica resource and compare the formulated descriptor with the cached descriptor;
and
if the formulated descriptor and the cached descriptor are not equivalent, formulate a second descriptor corresponding to the original resource and compare the formulated descriptor with the second descriptor.

4 more elements

A network server system, comprising:

a server component in a network server to receive a request for a resource maintained on the network server, the request designating a resource locator having a resource path that identifies a location of the resource, and, in response to the request, implement security policies to prevent unauthorized access to the resource;
a memory to store a cached descriptor corresponding to the resource;
and
a security component in a computing device remote to the network server and registerable with the server component during run-time to determine whether the resource will pose a security risk to the network server upon receipt of the request, the security component being configured to:
formulate a replica descriptor corresponding to a replica of the resource and compare the replica descriptor with the cached descriptor;
and
if the replica descriptor and the cached descriptor are not equivalent, formulate a second descriptor corresponding to the resource and compare the replica descriptor with the second descriptor.

4 more elements

Dependencies are inferred from the claim text.

Security Component for a Computing Device

Life of this patent

Security Component for a Computing Device

Life of this patent

Abstract

Claims20