Dynamic method invocation for zero-day exploits
AssigneeCisco Technology, Inc.
InventorsWalter Theodore HULICK, JR., Galen LANSBURY
Life of this patent
Estimating the term…
Abstract
In some embodiments, techniques for dynamic method invocation for zero-day exploits may include locating, by a security agent, an entry point to a method of an online application; injecting, by the security agent, instrumentation code into the entry point of the method; receiving, at the security agent, a security policy regarding the method that dynamically sets a parameter of the instrumentation code; and executing, by the security agent and based on the parameter of the instrumentation code, wrapper code for the method that performs a mitigation action with respect to the method.
Claims20
A method, comprising:
- locating, by a security agent, an entry point to a method of an online application;
- injecting, by the security agent, instrumentation code into the entry point of the method;
- receiving, at the security agent, a security policy regarding the method that dynamically sets a parameter of the instrumentation code;
- and
- executing, by the security agent and based on the parameter of the instrumentation code, wrapper code for the method that performs a mitigation action with respect to the method.
An apparatus, comprising:
- one or more network interfaces;
- a processor coupled to the one or more network interfaces and configured to execute one or more processes;
- and
- a memory configured to store a process that is executable by the processor, the process when executed configured to:
- locate an entry point to a method of an online application;
- inject instrumentation code into the entry point of the method;
- receive a security policy regarding the method that dynamically sets a parameter of the instrumentation code;
- and
- execute, based on the parameter of the instrumentation code, wrapper code for the method that performs a mitigation action with respect to the method.
A tangible, non-transitory, computer-readable medium storing program instructions that cause a device to execute a process comprising:
- locating, by a security agent, an entry point to a method of an online application;
- injecting, by the security agent, instrumentation code into the entry point of the method;
- receiving, at the security agent, a security policy regarding the method that dynamically sets a parameter of the instrumentation code;
- and
- executing, by the security agent and based on the parameter of the instrumentation code, wrapper code for the method that performs a mitigation action with respect to the method.
Dependencies are inferred from the claim text.