Micro Focus Lcc

Entit Software LLC

Hewlett Packard Enterprise Development LP

Secure Code Warrior Limited

Matias Madou

Sam Ng Ming Sum

Ronald Joseph Sechman

Sasi Siddharth Muthurajan

Kirill Mendelev

Jeremy C Brooks

Brian V Chess

Sean Patrick Fay

Ming Sum Sam Ng

Prajakta Subhash Jagdale

Nathan Desmet

Colin Wong

Pieter De Cremer

Benjamin Seth Heilers

Sam Ng

A method includes identifying an error in computer readable code and identifying a user profile associated with a development environment used to generate the computer readable code. The method also includes searching a database for user profile information indicative of a training sequence performed by a user associated with the user profile. The method further includes identifying a type of the error identified in the computer readable code and comparing the type of the error with one or more properties associated with the training sequence. The method additionally includes calculating a severity of the error based on the comparison with the one or more properties associated with the training sequence, and assigning a competence level to the user associated with the user profile based on the calculated severity. The method further includes generating a remediation suggestion to correct the error in the computer readable code based on the competence level.

Method and system for adaptive security guidance

Information stored in a Hypertext Transfer Protocol (HTTP) session is monitored. Based on the monitoring, authentication information in the information stored in the HTTP session is identified.

Monitoring for authentication information

A non-transitory processor-readable medium stores code that represents instructions that, when executed at a processor, cause the processor to access an attack description; intercept a data set from an application via an application programming interface (API), where the intercepted data set is based on an attack data set and where the attack data set is used to test for a security vulnerability in the application; correlate, using a Hamming distance, the intercepted data set with the attack description using a correlation type identifier; and report the security vulnerability for the application in response to the intercepted data set based at least in part on a result of the correlation.

Application security testing

Example embodiments disclosed herein relate to determining whether a protective measure meeting criteria has been performed on data. Execution of an application under test (AUT) is monitored. A message that a field of the AUT should be considered sensitive is received. Data is determined to be entered into the field. The data is monitored during execution of the AUT to determine whether the protective measure that meets the criteria has been performed on the data.

Determine protective measure for data that meets criteria

Example embodiments disclosed herein relate to generating a point-wise protection based on dynamic security analysis. Vulnerability solution recommendation are provided based on the dynamic security analysis. A point-wise protection is generated based on a selection of the vulnerability solution recommendation.

Point-wise protection of application using runtime agent and dynamic security analysis

Example embodiments disclosed herein relate to determining a secure activity of an application under test (AUT). Execution of an application under test is monitored. During an attack vector, an application programming interface associated with a secure activity is determined. A message is sent to a security test that secure activity occurred.

Determine whether an appropriate defensive response was made by an application under test

Example embodiments disclosed herein relate to an approach for installing a runtime agent during a security test. A security test is initiated or performed on an application under test executing on a server. An application vulnerability associated with the application under test is determined. The application vulnerability is exploited to install the runtime agent on the server. The security test is continued using the runtime agent to receive additional information about the application under test.

Install runtime agent for security test

Example embodiments disclosed herein relate to determining permissible activity in an application. Application programming interfaces (APIs) of an application are monitored using a runtime agent. Information about the APIs is provided to a rules engine. A set of rules describing permissible activity is received from the rules engine.

Determining permissible activity based on permissible activity rules

Example embodiments disclosed herein relate to a security test. A crawl of an application under test (AUT) is performed to determine an attack surface using crawl sessions. One or more parameters of the attack surface are probed during the respective crawl sessions. A trace is requested from an observer for the probe of the one or more parameters. Attack suggestions are received from the observer based on the trace of the one or more parameters.

Application test using attack suggestions

Example embodiments disclosed herein relate to actively modify execution at runtime of an application under test (AUT). The AUT is executed using a real-time modifier. A security test is performed on the AUT. Execution of the AUT is modified at a decision point.

Example embodiments disclosed herein relate to modifying execution of an application under test to act as if a user is a power user. The application under test is hosted in a real-time modifier. A security crawl is performed on the application under test logged in as the user. The user is treated as a power user.

Modify execution of application under test so user is power user

Example embodiments disclosed herein relate to generating a scanning strategy based on a dynamic taint module. A dynamic taint module associated with an application is caused to be initiated for a crawling phase of a security test. A report is received from the dynamic taint module. The dynamic taint module is restricted. The scanning strategy is based on the report.

Security scan based on dynamic taint

Example embodiments disclosed herein relate to real-time modification of an application under test (AUT). A security rest is performed on the AUT. A real-time modifier determines that a portion of a function to be executed by the AUT is unsafe. The real-time modifier modifies execution of the AUT to not execute the portion.

Growing community of inventors

Auburn Hills, MI, United States of America

Matias Madou