System and method for automated security testing
AssigneeSap SE
InventorsKeqin Li, Cedric Hebert, Holger Mack, Tom Schröer
Life of this patent
Estimating the term…
Abstract
According to some embodiments, a list of files comprising each file in a data repository that is associated with the website is determined. A list of user roles comprising each user role in the data repository that is associated with the website is determined. Each file in the list of files based on each user role in the list of user roles is attempted to be accessed and a report indicating the success or failure of the attempt to access each file in the list of files based on each user role in the list of user roles is created.
Claims21
A system comprising:
- a developer web server comprising a website;
- a data repository;
- and
- a computing device that in response to receiving an indication from a developer, automatically:
- determines a list of files comprising each file in the data repository that is associated with the website;
- determines a list of user roles comprising each user role in the data repository that is associated with the website;
- attempts to access each file in the list of files based on each user role in the list of user roles;
- and
- creates a report indicating a success or a failure of the attempt to access each file in the list of files.
A method comprising:
- in response to receiving an instruction from a developer, automatically (i) determining, via a processor, a list of files comprising each file in a data repository that is associated with a developer website;
- (ii) determining a list of user roles comprising each user role in the data repository that is associated with the website;
- (iii) attempting to access each file in the list of files based on each user role in the list of user roles;
- and
- (iv) creating a report indicating a success or a failure of the attempt to access each file in the list of files wherein the success or the failure are indicated by Hypertext Transfer Protocol (“HTTP”) codes.
(canceled)
A non-transitory computer-readable medium storing program code executable by a computer processor to perform a method, wherein execution of the code causes the computer processor to:
- in response to receiving an instruction from a developer, automatically (i) determine, via a processor, a list of files comprising each file in the data repository that is associated with a developer website;
- (ii) determine a list of user roles comprising each user role in the data repository that is associated with the website;
- (iii) attempt to access each file in the list of files based on each user role in the list of user roles by logging on to the website using a user associated with each user role;
- and
- (iv) create a report indicating the success or failure of the attempt to access each file in the list of files based on each user role in the list of user roles.
Dependencies are inferred from the claim text.