Detection of second order vulnerabilities in web services
AssigneeInternational Business Machines Corporation
InventorsYAIR AMIT, EVGENY BESKROVNY, OMER TRIPP
Life of this patent
Estimating the term…
Abstract
A system for detecting a vulnerability in a Web service can include a processor configured to initiate executable operations including determining whether a Web service uses identity of a requester to select one of a plurality of different paths of a branch in program code of the Web service and, responsive to determining that the Web service does select one of a plurality of different paths of a branch according to identity of the requester, indicating that the Web service has a potential vulnerability.
Claims11
1-15. (canceled)
A system comprising:
- a processor configured to initiate executable operations comprising:
- determining whether a Web service uses identity of a requester to select one of a plurality of different paths of a branch in program code of the Web service;
- and
- responsive to determining that the Web service does select one of a plurality of different paths of a branch according to identity of the requester, indicating that the Web service has a potential vulnerability.
A computer program product for detecting a vulnerability in a Web service, the computer program product comprising:
- a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
- computer readable program code configured to determine whether a Web service uses identity of a requester to select one of a plurality of different paths of a branch in program code of the Web service;
- and
- computer readable program code configured to, responsive to determining that the Web service does select one of a plurality of different paths of a branch according to identity of the requester, indicate that the Web service has a potential vulnerability.
Dependencies are inferred from the claim text.