Webcrawl internet security analysis and process
AssigneeHewlett-Packard Development Company, L.P.
InventorsDennis Hurst, Darrin Barrall, Caleb Sima
Life of this patent
Estimating the term…
Abstract
An automated Web security analysis system and process identifies security vulnerabilities in a target Internet Web site by parsing through the target Web sit to search for a predetermined list of common security vulnerabilities. The process is recursive, exploiting information gathered throughout the process to search for additional security vulnerabilities. A prioritized list of detected security vulnerabilities is then presented to a user, including preferably a list of recommendations to eliminate the detected security vulnerabilities.
Claims4
A process of detecting security vulnerabilities present in a target Web site, comprising the steps of:
- establishing an Internet connection with the target Web site;
- retrieving a Web page for the target Web site;
- parsing through the Web page to identify any linked-to Web pages or any hidden Web pages or objects which are included in the Web pages;
- and
- identifying security vulnerabilities by performing at least one of the steps of (i) scanning the target Web site for at least one vulnerability and (ii) applying at least one hack method to the target Web site.
A computer program for detection of security vulnerabilities present in a target Web site, comprising a machine readable medium having program code in machine readable format, which when executed causes the computer to perform the following steps:
- establish an Internet connection with the target Web site;
- retrieve a default Web page for the target Web site;
- parse through the Web page to identify any linked-to Web pages or objects which are included in the Web page;
- and
- identify security vulnerabilities by performing at least one of the steps of (i) scanning the target Web site for at least one vulnerability and (ii) applying at least one hack method to the target Web site.
Dependencies are inferred from the claim text.