Secure web application development environment
AssigneeHewlett-Packard Development Company, L. P.
InventorsCaleb Sima, Timothy Farley
Life of this patent
Estimating the term…
Abstract
Various embodiments of systems, methods, software tools, etc. for providing secure web application development are provided. One embodiment comprises a method for developing a secure web application. One such method comprises: analyzing code associated with a web application to identify at least one vulnerable input; and validating the at least one vulnerable input.
Claims17
A method for developing a secure web application, the method comprising:
- analyzing code, by a computing processor, associated with a web application to identify at least one security vulnerability related to a data entry field of the web application;
- generating validation code, by the processor, to alleviate the security vulnerability, wherein said generating validation code comprises displaying identity of the at least one security vulnerability to a developer of the web application and displaying at least one validation routine, for selection by the developer, to be applied to the at least one security vulnerability;
- inserting the validation code into the web application code to validate proper use of the data entry field associated with the security vulnerability, thereby alleviating the vulnerability;
- checking, by the processor executing the inserted validation code, whether data entered into the data entry field conforms to a predetermined format;
- and
- changing, by the processor executing the inserted validation code, the entered data that does not conform to the predetermined format to ensure conformity with the predetermined format.
A system for developing a secure web application, the system comprising:
- a processor;
- memory storing computer executable instructions that when executed by the processor cause the processor to:
- analyze code associated with a web application to identify at least one security vulnerability related to a data entry field of the web application;
- generate validation code to alleviate the security vulnerability, wherein generating validation code comprises displaying identity of the at least one security vulnerability to a developer of the web application and displaying at least one validation routine, for selection by the developer, to be applied to the at least one security vulnerability;
- insert the validation code into the web application code to validate proper use of the data entry field associated with the security vulnerability, thereby alleviating the vulnerability;
- check whether data entered into the data entry field conforms to a predetermined format;
- and
- change the entered data that does not conform to the predetermined format to ensure conformity with the predetermined format.
A non-transitory computer-readable storage device comprising instructions that, when executed, cause one or more processors to:
- analyze code associated with a web application to identify at least one security vulnerability related to a data entry field of the web application
- generate validation code to alleviate the security vulnerability, wherein generating validation code comprises displaying identity of the at least one security vulnerability to a developer of the web application and displaying at least one validation routine, for selection by the developer, to be applied to the at least one security vulnerability;
- insert the validation code into the web application code to validate proper use of the data entry field associated with the security vulnerability, thereby alleviating the vulnerability;
- check whether data entered into the data entry field conforms to a predetermined format;
- change the entered data that does not conform to the predetermined format to ensure conformity with the predetermined format.
Dependencies are inferred from the claim text.