Back to results
US 9,438,617 B2Granted
Application security testing
AssigneeHewlett Packard Enterprise Development LP
InventorsKirill Mendelev, Matias Madou, Sam Ng Ming Sum
Life of this patent
Estimating the term…
Abstract
Example embodiments disclosed herein relate to real-time modification of an application under test (AUT). A security rest is performed on the AUT. A real-time modifier determines that a portion of a function to be executed by the AUT is unsafe. The real-time modifier modifies execution of the AUT to not execute the portion.
Claims19
A computing system comprising:
- a hardware server coupled to a computing device, the hardware server to host an application under test in a testing environment, wherein the hardware server includes instructions executable by the hardware server to:
- determine that a function to be executed by the application under test includes a vulnerability and prevent a portion of the function that includes the vulnerability from being executed;
- identify instructions associated with an application programming interface (API) called by the application under test that include the vulnerability;
- and
- modify the execution of the application under test by substituting the identified instructions with instructions associated with a different API.
2 more elements
A non-transitory machine-readable storage medium storing instructions that, if executed by a hardware processor of a device, cause the device to:
- receive communications from a computing device communicatively coupled to an application under test hosted using a real-time modifier to perform a security test on the application under test;
- determine, by the real-time modifier, that a portion of a function to be executed by the application under test includes a vulnerability;
- modify, by the real-time modifier, an execution of the application under test to prevent execution of the portion;
- identify, by the real-time modifier, instructions associated with an application programming interface (API) called by the application under test that include the vulnerability;
- and
- modify the execution of the application under test by substituting, by the real-time modifier, the identified instructions with instructions associated with a different API.
3 more elements
A method comprising:
- hosting an application under test using a real-time modifier on a server;
- receiving communications from a computing device communicatively coupled to the application under test to perform a security test on the application under test;
- determining, by the real-time modifier, that a portion of a function to be executed by the application under test includes a vulnerability based on a type of activity caused by the portion;
- modifying, by the real-time modifier, an execution of the application under test to prevent execution of the portion;
- identifying instructions associated with an application programming interface (API) called by the application under test that include the vulnerability;
- and
- modifying the execution of the application under test by substituting the identified instructions with instructions associated with a different API.
4 more elements
Dependencies are inferred from the claim text.