Context-sensitive application security
AssigneeHewlett-Packard Development Company, L.P.
InventorsBrian V. Chess, Sean Patrick Fay
Life of this patent
Estimating the term…
Abstract
In one implementation, a tag is associated with a tainted value of an application and an output context of the application that is associated with output from the application that includes the tainted value is determined. A taint processing is a applied to the tainted value in response to the output of the tainted value, the taint processing is compatible with the output context.
Claims20
A processor-readable medium storing code representing instructions that when executed at a processor cause the processor to:
- associate a tag with a tainted value of an application;
- determine an output context of the application associated with output from the application including the tainted value;
- and
- apply a taint processing to the tainted value in response to the output of the tainted value, the taint processing compatible with the output context.
An context-sensitive application security system, comprising:
- an output context monitor to monitor a current output context of an application;
- and
- a taint processing module to select a taint processing from a plurality of taint processings based on the current output context and to apply the taint processing to a tainted value included in output from the application.
An context-sensitive application security method, comprising:
- receiving output from an application, the output including a tainted value;
- identifying the tainted value within the output;
- and
- applying a taint processing to the tainted value, the taint processing compatible with an output context of the application associated with the output.
Dependencies are inferred from the claim text.