# US 2014/0157413 A1 · Application testing system and method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2014/0157413 A1
- Document ID: US20140157413A1
- Status: Published application
- Kind: A1
- Application number: 14/048,585
- Filed: 2013-10-08
- Published: 2014-06-05
- Earliest claimed: 2012-12-04
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Yair Amit; Adi Cohen; Lotem Guy; Alexander Landau; Omer Tripp; Avishai Vana; Omri Weisman
- Web page: https://patentgrep.com/patent/US20140157413A1

## CPC

- H04L 63/1416: {Event detection, e.g. attack signature detection}
- H04L 63/0245: {Filtering by information in the payload}
- H04L 63/1433: {Vulnerability analysis}
- H04L 1/008: {where the control data relates to payload of a different packet}
- H04L 5/0044: {Allocation of payload; Allocation of data channels, e.g. PDSCH or PUSCH}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A method, computer program product, and computer system for sending, by a first computing device, a payload from a plurality of payloads to a second computing device. A response from the second computing device responding to the payload is received at the first computing device. It is determined whether the payload has successfully attacked an application executing at the second computing device based upon, at least in part, the response. If not, at least a portion of the plurality of payloads that shares a structural overlap with the first payload is identified. At least a second payload of the portion is prevented from being sent to the second computing device in response to identifying that the second payload shares the structural overlap with the first payload.

## Claims

### Claim 1

A computer-implemented method comprising:
sending, by a first computing device, a payload from a plurality of payloads to a second computing device;
receiving, at the first computing device, a response from the second computing device responding to the payload;
determining whether the payload has successfully attacked an application executing at the second computing device based upon, at least in part, the response; and if the attack failed,
identifying at least a portion of the plurality of payloads that shares a structural overlap with the first payload; and
preventing at least a second payload of the portion from being sent to the second computing device in response to identifying that the second payload shares the structural overlap with the first payload.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1 wherein the structural overlap includes a token.

### Claim 3 (depends on 1)

The computer-implemented method of claim 1 wherein preventing at least the second payload of the portion from being sent to the second computing device includes adjusting a priority of at least the second payload.

### Claim 4 (depends on 1)

The computer-implemented method of claim 1 further comprising selecting a grammar for generating the plurality of payloads.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1 further comprising generating a data structure to model the structural overlap of at least the second payload with the first payload.

### Claim 6 (depends on 5)

The computer-implemented method of claim 5 wherein the data structure includes a weighted edge label associated with the structural overlap of at least the second payload with the first payload.

### Claim 7 (depends on 1)

The computer-implemented method of claim 1 wherein the successful attack includes a cross-site scripting attack.

### Claim at position 8

8-21. (canceled)