International Business Machines Corporation

Da Ming Hao

Lin Luo

Yu Zhang

Ya Bin Dang

Ye Wy Wang

Peter Kenneth Malkin

Peng Ji

Lawrence Scott Rich

Brent Tzion Hailpern

Harold Leon Ossher

Zhong Tian

Shun Xiang Yang

Shih-Gong Li

Hang Jun Ye

John D Wiegand

Dave Thomson

A method, a system, and a computer program product embodying computer readable code for configuring a rule file for a Web application firewall. The method includes: blocking a response created by a Web application; modifying the response by adding capturing code for capturing a regular expression and an associated parameter value embedded in the response while being executed; sending the modified response to the browser; receiving a request submitted by the browser and at least one regular expression and an associated parameter value captured by the capturing code; determining a parameter name and a regular expression associated with the same parameter value, and configuring the rule file of the firewall by use of the determined parameter name and regular expression associated with one another as a filtering rule.

Method and system for configuring a rule file for firewall of web server

Provided is a secure apparatus for protecting the integrity of a software system and a method thereof. The apparatus comprises: a template repository for storing templates required for generating an agent module; a template generator for randomly selecting one template from said template repository and generating a new agent module according to the selected template; and a transceiver for sending said new agent module to an external apparatus communicating with said secure apparatus to update a current agent module which is running in said external apparatus, wherein said current agent module is used to verify the integrity of said software system running in said external apparatus. The secure apparatus can protect software in an insecure environment with a high software protection level to prevent the software from being tampered or bypassed.

Secure apparatus and method for protecting integrity of software system and system thereof

A runtime vulnerability defense method, system, and computer readable article of manufacture tangibly embodying computer readable instructions for executing the method for cross domain interactions for a Web application. The method includes: creating a first and second iFrame object by the Web application which belong to a lower domain; creating an object O by the first iFrame object; sharing the created object O by the second iFrame object; promoting the domain of the second iFrame object to an upper domain; creating in the shared object O a source accessing function for submitting to a third party server a request to access the content of the third party server; and creating in the shared object O a sanitization function for sanitizing the response received from the server.

Method and system for providing runtime vulnerability defense for cross domain interactions

A method, system and an article of manufacture tangibly embodying a computer readable program for protecting Web application data between a server and a client. A response created by the Web application for the client is backed up and modified by adding capturing code for capturing a user action, user data of the client, or combination thereof. The modified response is sent to the client and a request submitted by the client and the user action and/or user data captured by the capturing code is received. A verifying request is generated according to the received user action and/user data captured by the capturing code and the backup of the response. The request submitted by the client is verified according to the verifying request and the verified request is sent to the Web application of the server.

Protecting web application data

A method and system for maintaining originality-related information about elements in an editable object. It is determined that an element has been edited in the editable object. The originality-related information about the element, including the element's creator, is identified and recorded by embedding the originality-related information in the editable object, storing the originality-related information in an attached file, or storing the originality-related information in association with the element in a repository configured to be shared by different editable objects and further configured to be queried for elements of the different editable objects in association with originality-related information pertaining to the elements of the different editable objects. Whether the element is in compliance with a policy relating to the originality-related information about the element is assessed, and a result of the assessing (indicating compliance or non-compliance of the element with the policy) may be transmitted to a user.

Method and system for maintaining originality-related information about elements in an editable object

Growing community of inventors

Beijing, China

Da Ming Hao