US 2014/0196141 A1 · HIERARCHICAL RULE DEVELOPMENT AND BINDING FOR WEB APPLICATION SERVER FIREWALL

Abstract

At least one of an HTTP request message and an HTTP response message is intercepted. A corresponding HTTP message model includes a plurality of message model sections. A representation of the at least one of an HTTP request message and an HTTP response message is parsed into message sections in accordance with the message model sections of the HTTP message model. A plurality of security rules are bounds to the message model sections. The plurality of security rules each specify at least one action to be taken in response to a given condition, which is based, at least in part, on a corresponding given one of the message sections. The at least one of an HTTP request message and an HTTP response message is processed in accordance with the plurality of security rules. Techniques for developing rules for a web application server firewall are also provided.

Claims10

Dependent claims

(canceled)

An article of manufacture comprising a computer program product for configuring a web application server firewall to process HTTP request messages and HTTP response messages in according with a plurality of security rules, said computer program product comprising:

a computer readable storage medium, storing in a non-transitory manner computer readable program code, said computer readable program code comprising:
computer readable program code configured to build a plurality of HTTP message models including a first HTTP message model configured to process said HTTP request messages and a second HTTP message model configured to process said HTTP response messages, each of said first and second HTTP message models comprising a plurality of message model sections;
computer readable program code configured to develop said plurality of security rules, each security rule specifying at least one action responsive to a given condition, said given condition being based, at least in part, on a corresponding section of a message intercepted by said web application server firewall;
and
computer readable program code configured to bind said plurality of security rules to said message model sections.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application

14/147,857Filed 6 Jan 2014

Priority

24 May 2011

Published

10 Jul 2014

Term ends

Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 63/0263
Filtering policies: rule management
H04L 63/02
Network architectures or network communication protocols for network security: for separating internal from external traffic, e.g. firewalls
H04L 63/0245
Filtering policies: filtering by information in the payload
H04L 63/105
For controlling access to devices or network resources: multiple levels of security

Hierarchical rule development and binding for web application server firewall

Life of this patent

Hierarchical rule development and binding for web application server firewall

Life of this patent

Abstract

Claims10