International Business Machines Corporation

Jason Matthew Wicker

Ryan R Wilson

Matthew T Pellas

Devang D Patel

Travis Cornwell

Matthew Munse

A system and method for identifying and circumventing a security scanner includes monitoring incoming traffic to a web application, identifying a portion of the incoming traffic as security scanner traffic by comparing the incoming traffic to a security scanner traffic profile, and circumventing the security scanner by providing dummy content or signaling the web application to provide dummy content. The security scanner traffic profile is created by receiving web application traffic generated by a plurality of security scanners; identifying web application traffic features common to at least a portion of the plurality of security scanners by modelling using artificial intelligence, machine learning, and the like; and generating the security scanner traffic profile based on the identified web application traffic features.

Identifying and circumventing security scanners

A user-device configured server code trace request that specifies an element identifier of a specified user-device interface element served by a server device and a server code tracing depth specified by a user of a user device is received at the server device from the user device served by the server device. Using the specified element identifier, a granular server code trace of server code scoped to the specified server code tracing depth and scoped to a portion of the server code utilized in association with the specified user-device interface element is performed.

Client-configured server class tracing to a configurable threshold

A user-device configured server code trace request that specifies an element identifier of a specified user-device interface element served by a server and a server code tracing depth specified by a user of a user device is received at the server device from the user device served by the server device. Using the specified element identifier, a granular server code trace of server code scoped to the specified server code tracing depth and scoped to a portion of the server code utilized in association with the specified user-device interface element is configured. The configured granular server code trace of the server code scoped to the specified server code tracing depth and scoped to the portion of the server code utilized in association with the specified user-device interface element is performed.

Systems and methods may provide turn-by-turn directions to a group of users who wish to meet one another. The systems and methods make use of a client application running on client-side devices such as smart phones in conjunction with a server-side application running on a server. The identity of the final meeting place may not be determined until the users are in close proximity to it, as its location is subject to continuous updating using the geo-coordinates of the users as they travel. Additionally, the meeting place may be determined in part by the users' individual preferences. These preferences, along with the locations of the users, may be kept hidden from other users.

Dynamically determining meeting locations

A web client is controlled to actively ignore scripts in certain portions of a web document using control instructions in the form of a special pair of markup language 'tags.' A tag pair of this type is defined by a first tag, and a second tag paired with the first tag to form the tag pair. Each of the first and second tags includes a same identifier, and the tag pair is adapted to be recognized by a browser interpreter to instruct the web client to ignore given information located with the tag pair. Thus, when a web document is received by a web client, it is parsed (by the interpreter) in the usual manner. Upon determining that the tag pair is present, the browser bypasses (ignores) given information (typically, a script) located with the tag pair. Bypassing the script reduces the possibility that the script can be used for malicious purposes, such as an XSS attack.

Instructing web clients to ignore scripts in specified portions of web pages

A cookie attribute for use during secure HTTP transport sessions. This attribute points to a server-supplied certificate and, in particular, a digital certificate. The cookie attribute includes a value, and that value is designed to correspond to one or more content fields in the digital certificate. During a first https session, a first web application executing on a first server provides a web browser with the cookie having the server certificate identifier attribute set to a value corresponding to a content field in a server certificate. Later, when the browser is accessing a second server during a second https session, the browser verifies that the value in the cookie matches a corresponding value in the server certificate received from the second server before sending the cookie to the second server. This approach ensures that the cookie is presented only over specified https connections and to trusted organizations.

Growing community of inventors

Pittsboro, NC, United States of America

Jason Matthew Wicker