Webcrawl internet security analysis and process
AssigneeHewlett-Packard Development Company, L.P.
InventorsDennis Wayne Hurst, Darrin Ray Barrall, Caleb Ikaki Sima
Life of this patent
Estimating the term…
Abstract
An automated Web security analysis system and process identifies security vulnerabilities in a target Internet Web site by parsing through the target Web sit to search for a predetermined list of common security vulnerabilities. The process is recursive, exploiting information gathered throughout the process to search for additional security vulnerabilities. A prioritized list of detected security vulnerabilities is then presented to a user, including preferably a list of recommendations to eliminate the detected security vulnerabilities.
Claims4
A process of detecting security vulnerabilities present in a target Web site, comprising the steps of:
- establishing an Internet connection with the target Web site;
- retrieving a Web page for the target Web site;
- parsing through the Web page to identify any linked-to Web pages or any hidden Web pages or objects which are included in the Web pages;
- and
- identifying security vulnerabilities by performing at least one of the steps of (i) scanning the target Web site for at least one vulnerability and (ii) applying at least one hack method to the target Web site.
An internet security analysis system for detection of security vulnerabilities present in a target Web site, the internet security analysis system comprising:
- a processing unit;
- a memory and storage device associated with the processing unit;
- at least one software routine which when executed by the processing unit, are operable to:
- establish an Internet connection with the target Web site;
- retrieve a default Web page for the target Web site into the memory and storage device;
- parse through the Web page to identify any linked-to Web pages or objects which are included in the Web page;
- and
- identify security vulnerabilities by performing at least one of the steps of (i) scanning the target Web site for at least one vulnerability and (ii) applying at least one hack method to the target Web site.
Dependencies are inferred from the claim text.