Secure web application development and execution environment
AssigneeHewlett-Packard Development Company, L.P.
InventorsCaleb Sima, Bryan Sullivan
Life of this patent
Estimating the term…
Abstract
Providing secure web application development and operation. In a web development environment, code developed for the web application is analyzed to identify vulnerabilities and remedial actions are identified. The remedial actions may be automatically invoked or a developer can be prompted to take particular actions to remediate the vulnerability.
Claims20
A method for developing a secure web application, the method comprising:
- in a web application development environment:
- analyzing code, by a processor, associated with a web application to identify at least one security vulnerability;
- comparing the at least one security vulnerability to a vulnerability datastore, which stores validation routines for verifying input data associated with the at least one security vulnerability, to identify a recommended validation routine;
- and
- alleviating, by the processor, the security vulnerability by invoking a developer interface that enables a developer of the web application to select from a group of remediation actions including:
- generating remediation code and inserting the remediation code into the web application;
- generating remediation code and replacing a section of insecure code within the web application with the remediation code.
A non-transitory computer-readable storage medium that stores a web application development environment program that, when executed, causes a processor to:
- operate a vulnerability identification module to analyze code of a web application and identify one or more vulnerabilities within said code;
- compare the one or more vulnerabilities to a vulnerability datastore, which stores validation routines for verifying input data associated with the at least one security vulnerability, to identify a recommended validation routine;
- and
- operate a remediation module to alleviate one or more of the vulnerabilities identified by the vulnerability detection module by switching at least one existing input authentication feature of said code between an enabled state and a disabled state.
A system for developing a secure web application, the system comprising:
- a processor;
- a web application development environment stored on a computer-readable storage medium and executed by the processor;
- and
- a vulnerability detection module integrated with operations of the web application development environment, the vulnerability detection module comprising:
- logic configured to analyze code associated with a web application being developed via the web application development environment;
- logic configured to identify vulnerabilities in the web application;
- logic configured to compare at least one security vulnerability to a vulnerability datastore, which stores validation routines for verifying input data associated with the at least one security vulnerability, to identify a recommended validation routine;
- and
- a remediation module integrated with operations of the web application development environment, the remediation module comprising:
- logic configured to provide remediation measures to alleviate at least one of said vulnerabilities by selectively forcing at least one existing authentication feature of said code to be enabled or disabled.
Dependencies are inferred from the claim text.