# US 2014/0157406 A1 · Application testing system and method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0157406 A1
- Document ID: US20140157406A1
- Status: Published application
- Kind: A1
- Application number: 13/693,275
- Filed: 2012-12-04
- Published: 2014-06-05
- Earliest claimed: 2012-12-04
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Yair Amit; Adi Cohen; Lotem Guy; Alexander Landau; Omer Tripp; Avishai Vana; Omri Weisman
- Web page: https://patentgrep.com/patent/US20140157406A1

## CPC

- H04L 63/1416: {Event detection, e.g. attack signature detection}
- H04L 63/0245: {Filtering by information in the payload}
- H04L 63/1433: {Vulnerability analysis}
- H04L 1/008: {where the control data relates to payload of a different packet}
- H04L 5/0044: {Allocation of payload; Allocation of data channels, e.g. PDSCH or PUSCH}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method, computer program product, and computer system for sending, by a first computing device, a payload from a plurality of payloads to a second computing device. A response from the second computing device responding to the payload is received at the first computing device. It is determined whether the payload has successfully attacked an application executing at the second computing device based upon, at least in part, the response. If not, at least a portion of the plurality of payloads that shares a structural overlap with the first payload is identified. At least a second payload of the portion is prevented from being sent to the second computing device in response to identifying that the second payload shares the structural overlap with the first payload.

## Claims

### Claim at position 1

-7. (canceled)

### Claim 8

A computing system including a processor and a memory configured to perform operations comprising:
sending, by a first computing device, a payload from a plurality of payloads to a second computing device;
receiving, at the first computing device, a response from the second computing device responding to the payload;
determining that the payload has successfully attacked an application executing at the second computing device based upon, at least in part, the response;
identifying at least a portion of the plurality of payloads that shares a structural overlap with the first payload; and
preventing at least a second payload of the portion from being sent to the second computing device in response to identifying that the second payload shares the structural overlap with the first payload.

### Claim 9 (depends on 8)

The computing system of claim 8 wherein the structural overlap includes a token.

### Claim 10 (depends on 8)

The computing system of claim 8 wherein preventing at least the second payload of the portion from being sent to the second computing device includes adjusting a priority of at least the second payload.

### Claim 11 (depends on 8)

The computing system of claim 8 further comprising selecting a grammar for generating the plurality of payloads.

### Claim 12 (depends on 8)

The computing system of claim 8 further comprising generating a data structure to model the structural overlap of at least the second payload with the first payload.

### Claim 13 (depends on 12)

The computing system of claim 12 wherein the data structure includes a weighted edge label associated with the structural overlap of at least the second payload with the first payload.

### Claim 14 (depends on 8)

The computing system of claim 8 wherein the successful attack includes a cross-site scripting attack.

### Claim 15

A computer program product residing on a computer readable storage medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:
sending, by a first computing device, a payload from a plurality of payloads to a second computing device;
receiving, at the first computing device, a response from the second computing device responding to the payload;
determining that the payload has successfully attacked an application executing at the second computing device based upon, at least in part, the response;
identifying at least a portion of the plurality of payloads that shares a structural overlap with the first payload; and
preventing at least a second payload of the portion from being sent to the second computing device in response to identifying that the second payload shares the structural overlap with the first payload.

### Claim 16 (depends on 15)

The computer program product of claim 15 wherein the structural overlap includes a token.

### Claim 17 (depends on 15)

The computer program product of claim 15 wherein preventing at least the second payload of the portion from being sent to the second computing device includes adjusting a priority of at least the second payload.

### Claim 18 (depends on 15)

The computer program product of claim 15 further comprising selecting a grammar for generating the plurality of payloads.

### Claim 19 (depends on 15)

The computer program product of claim 15 further comprising generating a data structure to model the structural overlap of at least the second payload with the first payload.

### Claim 20 (depends on 19)

The computer program product of claim 19 wherein the data structure includes a weighted edge label associated with the structural overlap of at least the second payload with the first payload.

### Claim 21 (depends on 15)

The computer program product of claim 15 wherein the successful attack includes a cross-site scripting attack.