Back to results
US 9,866,587 B2Granted
Identifying suspicious activity in a load test
AssigneeEntit Software LLC
InventorsYaron Naveh, Ofer Eliassaf, Gil Zieder
Life of this patent
Estimating the term…
Abstract
Identifying suspicious activity in utilizing a load testing service can include establishing an amount of domain calls to a domain, modifying the amount, and blocking domain calls exceeding the amount.
Claims15
A system for identifying suspicious activity in utilizing a load testing service, comprising:
- a user cap engine to establish a cap of an amount of domain calls to a specific domain by a specific user of the load testing service over a period of time;
- a global cap engine to establish a cap of a number of domain calls to the specific domain by a plurality of users of the load testing service over the period of time;
- a user cap modify engine to modify the cap of the amount of domain calls by the specific user based on a verification of the specific user;
- a global cap modify engine to modify the cap of the amount of domain calls by the plurality of users based on a characteristic of the domain;
- and
- a block engine to block a domain call determined to exceed at least one of the modified cap of the amount of domain calls by the specific user and the modified cap of the amount of domain calls by the plurality of users.
3 more elements
A method for identifying suspicious activity in utilizing a load testing service, comprising:
- identifying a main domain and a number of auxiliary domains of an application under a load test;
- increasing a maximum amount of domain calls to the main domain and a maximum amount of domain calls to each of the number of auxiliary domains by a specific user over a period of time based on at least one of a verification of the specific user and a verification of the main domain;
- increasing a maximum amount of domain calls to the main domain and a maximum amount of domain calls to each of the number of auxiliary domains by a plurality of users over the period of time based on an increased load expectation for the application under the load test;
- and
- blocking a domain call that exceeds, over the period of time, at least one of the maximum amount of domain calls to:
- the main domain by the specific user,
- each of the number of auxiliary domains by the specific user,
- the main domain by the plurality of users, and
- each of the number of auxiliary domains by the plurality of users.
6 more elements
A non-transitory computer readable medium storing instructions executable by a processing resource to cause a computer to:
- identify a main domain and a number of auxiliary domains of an application under a load test;
- establish a maximum amount of domain calls to the main domain and a maximum amount of domain calls to each of the number of auxiliary domains by a specific user over a period of time;
- establish a maximum amount of domain calls to the main domain and a maximum amount of domain calls to each of the number of auxiliary domains by a plurality of users of a load testing service over the period of time;
- decrease the maximum amount of domain calls to a particular auxiliary domain of the number of auxiliary domains by the specific user based on a tracked amount of domain calls to the main domain by the specific user over the period of time to a tracked amount of domain calls to the particular auxiliary domain of the number of auxiliary domains by the specific user over the period of time falling outside of a particular ratio;
- identify as suspicious activity a domain call that exceeds at least one of the maximum amount of domain calls to:
- the main domain by the specific user,
- each of the number of auxiliary domains by the specific user,
- the main domain by the plurality of users of the load testing service, and
- each of the number of auxiliary domains by the plurality of users of the load testing service;
- and
- block the suspicious activity.
8 more elements
Dependencies are inferred from the claim text.