Detection of second order vulnerabilities in web services
AssigneeInternational Business Machines Corporation
InventorsYAIR AMIT, EVGENY BESKROVNY, OMER TRIPP
Life of this patent
Estimating the term…
Abstract
A method of detecting a vulnerability in a Web service can include determining, using a processor, whether a Web service uses identity of a requester to select one of a plurality of different paths of a branch in program code of the Web service. The method further can include, responsive to determining that the Web service does select one of a plurality of different paths of a branch according to identity of the requester, indicating that the Web service has a potential vulnerability.
Claims16
A method detecting a vulnerability in a Web service, the method comprising:
- determining, using a processor, whether a Web service uses identity of a requester to select one of a plurality of different paths of a branch in program code of the Web service;
- and
- responsive to determining that the Web service does select one of a plurality of different paths of a branch according to identity of the requester, indicating that the Web service has a potential vulnerability.
A method of detecting a vulnerability in a Web service, the method comprising:
- locating a seed instruction in program code of a Web service in which identity of a requester is determined;
- determining, using a processor, whether a value from the seed instruction indicating identity of the requester is determinative in selecting between a plurality of paths for a branch in program code of the Web service;
- and
- indicating that the Web service includes a potential vulnerability responsive to determining that the value from the seed instruction is determinative in selecting between the plurality of paths for the branch.
16-25. (canceled)
Dependencies are inferred from the claim text.