Micro Focus Lcc

Entit Software LLC

Alvaro Munoz Sanchez

Ming Sum Sam Ng

Yekaterina O'Neil

Oleksandr Mirosh

A method for attack detection includes: intercepting, by a runtime security agent, a request for a web resource; determining whether the intercepted request was triggered from an external website; determining whether the intercepted request was triggered from a current session; determining whether the intercepted request is requesting a static file type; and in response to a determination that the intercepted request was triggered from an external website and was not triggered from a current session, or a determination that the intercepted request was triggered from an external website and is not requesting a static file type, providing, by the runtime security agent, an indication of a potential attack.

Detection of cross-site attacks using runtime analysis

In one implementation, a system can comprise a probe monitor engine to monitor a probe passed to a function of a set of instructions, a propagation engine to identify an infrastructure connection based on an attribute of the probe during a runtime session, and a rule engine to generate an infrastructure rule based on the infrastructure connection and the attribute of the probe.

Growing community of inventors

Las Rozas, Spain

Alvaro Munoz Sanchez