Enterprise application shield systems and methods
AssigneeAT&T Intellectual Property I, L.P.
InventorsJason Navarro-Dimm, Brenda Pratt, Hussein Fareed
Life of this patent
Estimating the term…
Abstract
Aspects of the subject disclosure may include, for example, enterprise application shield systems and methods for performing a sequence of security checks as to an incoming HTTP request and forwarding the HTTP request to a target system upon detection of an absence of a triggering event and an absence of sensitive personal information. Otherwise, the HTTP request is dropped and no response will be provided to a sender of the HTTP request. Other embodiments are disclosed.
Claims20
A device, comprising:
- a processing system including a processor;
- and
- a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising:
- receiving a Hypertext Transfer Protocol (HTTP) request;
- performing a sequence of security checks including one or more types of security checks;
- detecting a presence or an absence of a triggering event in the HTTP request, wherein the triggering event includes failing to pass the one or more types of security checks;
- upon detection of the presence of the triggering event, dropping the HTTP request and sending the dropped HTTP request to a reporting module;
- upon detection of the absence of the triggering event, detecting a presence of predetermined check data in the HTTP request;
- upon detection of the presence of the predetermined check data, rejecting the HTTP request;
- and
- upon detection of no predetermined check data, forwarding the HTTP request to a target system.
A non-transitory machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:
- receiving an HTTP request including a plurality of payloads;
- sequentially performing a series of fast-fail checks for the HTTP request;
- detecting a presence of a triggering event in the HTTP request, wherein the triggering event comprises failing to meet one of the series of fast-fail checks;
- upon detection of the presence of the triggering event, dropping the HTTP request;
- upon detection of no triggering event, sending the HTTP request to a target system;
- providing, to a reporting module, internet protocol information of the dropped HTTP request;
- and
- providing, to an artificial intelligence module, the dropped HTTP request.
A method, comprising:
- receiving, by a processing system including a processor, a HTTP request;
- performing, by the processing system, a sequence of security checks including one or more types of security checks;
- detecting, by the processing system, a presence of one or more anomalies associated with the HTTP request via the sequence of security checks;
- upon detection of the presence of the one or more anomalies, dropping, by the processing system, the HTTP request and sending the dropped HTTP request to a reporting module;
- upon detection of no anomaly and upon detection of a presence of sensitive personal information, sending, by the processing system, the HTTP request to the reporting module;
- and
- upon detection of no anomaly and no sensitive personal information, forwarding, by the processing system, the HTTP request to a target system.
Dependencies are inferred from the claim text.