Hewlett-packard Development Company, L.P.

Micro Focus Lcc

David John Babcock

Robert Hundt

Umesh Krishnaswamy

Vinodha Ramasamy

Ronald Joseph Sechman

Eric Gouriou

Kirill Mendelev

Jose German Rivera

Thomas Lofgren

Lu Zhao

Jagadeesh Kandasamy

Spencer Firestone

An example system in accordance with an aspect of the present disclosure includes a framework to demonstrate and/or train at least one live product. The framework includes a first panel associated with at least one step, and a second panel to display content and at least a portion of the at least one live product according to the at least one step. The system also includes at least one script to perform at least one task associated with the at least one step. The at least one step is performable independent of an order in which the at least one step is presented by the framework.

Frameworks to demonstrate live products

Example embodiments relate to assessing dynamic security scans using runtime analysis and static code analysis. In example embodiments, a system performs static code analysis of a web application to identify reachable code and/or data entry points, where the data entry points are used to determine an attack surface size for the web application. At this stage, the system may initiate runtime monitoring for a dynamic security scan of the web application, where the runtime monitoring detects invocation of a statement at one of the data entry points. The invocation is logged as an invocation entry that comprises invocation parameters and/or code units that were executed in response to the invocation. The system may then determine an attack surface coverage of the dynamic security scan using the invocation entry and the attack surface size and/or a reachable code coverage using the invocation entry and the reachable code.

Determining coverage of dynamic security scans using runtime and static code analyses

Determining code coverage of a computer program is disclosed. In an embodiment, the program is divided into a plurality of code sections, and the program including the plurality of code sections is run with a plurality of test data sets. In the first test run, all code sections of the plurality of code sections are instrumented, and in each of a current test run other than the first test run, only those code sections that were not executed in any one of the test runs prior to the current test run are instrumented. A code section being executed in any of one of the test runs of the plurality of test runs is considered covered by the test runs. Additionally, within the current test run, the code coverage measurement is only done on the first execution of a code section.

Program code coverage

A method and system for reverting a process in an in-line instrumented state to an uninstrumented state. In one embodiment, the present invention modifies selected text segment portions from the process to be uninstrumented. The present embodiment then unmaps instrumented code space such that the instrumented code space is inaccessible to the process. In this embodiment, provided an instruction pointer resides in the instrumented code space, the present invention updates the instruction pointer to uninstrumented code space. The present embodiment also executes the process and, provided the process generates a fault by seeking to access an address in instrumented code space, provides a corresponding address in uninstrumented code space. In one embodiment, the present invention then continues execution at the address in instrumented code space.

Uninstrumenting in-line code instrumentation on-the-fly

Method and apparatus for dynamic instrumentation of an executable application program. The application program includes a plurality of functions, each function having an entry point and an endpoint. When the application is executed, a shared memory segment is created for an instrumentation program and the application program. Upon initial invocation of the original functions in the application program, corresponding substitute functions are created in the shared memory segment, the substitute versions including instrumentation code. Thereafter, the substitute functions are executed in lieu of the original functions in the application program.

Growing community of inventors

San Jose, CA, United States of America

David John Babcock