Microsoft Technology Licensing, LLC

Mcafee, Inc.

Michael Andrews

Sven Schrecker

Emmanouil Koukoumidis

Marcelo Medeiros De Barros

Manish Mittal

Daniel Massey

Girish Bablani

Cezar Augusto Alevatto Guimaraes Neto

Adam Edward Shirey

Sharat Shroff

Dennis Gursky

Brian J Alseth

Richard P Lozada

Melissa Lauren Benua

Anthony Turner

Daniel Lee Massey

A server device configured to execute an electronic data analysis platform program to store a plurality of modular data processing tools, each modular data processing tool configured to perform data processing with predetermined data types and to combine with other modular data processing tools in a data analysis pipeline, receive a user input of one or more user data sources, map the data of the one or more user data sources to one or more of the predetermined data types, determine a data analytic goal for the mapped one or more user data sources, select one or more modular data processing tools configured to process the one or more predetermined data types mapped to data of the mapped one or more user data sources to generate the data analytic goal, and generate a data analysis pipeline configured to generate the data analytic goal.

Modular electronic data analysis computing system

Web applications, systems and services, which are prone to cyber-attacks, can utilize an adaptive fuzzing system and methodology to intelligently employ fuzzer technology to test web site pages for vulnerabilities. A breadth first search and minimal fuzzing testing is performed on identified pages of a web site looking for either a vulnerability or the potential for a vulnerability. Heuristics are gathered and/or generated on each tested web page to determine a vulnerability score for the page that is an indication of the page's potential for hosting a vulnerability. When a page is discovered with a vulnerability score that indicates the page has the potential for a vulnerability a depth first search and expanded fuzzing testing is performed on one or more branches of the web site that begin with the page with the potential vulnerability.

Adaptive fuzzing system for web services

Embodiment relate to systems, methods, and computer storage media for suppressing cross-site scripting in a content delivery system. A request is received for content that includes a scripted item or scripted items. The scripted item is identified within the content. An identifier is associated with the scripted element when the scripted element is an intended scripted element to be associated with the content. The identifier may be a hash value based from a hash function and the scripted item. Prior to communicating the content to a user, the scripted item is identified again to determine if an identifier is associated with the scripted item. If an identifier is associated with the scripted item, the identifier is evaluated to determine if the identifier is appropriate. When the identifier is determined to not be appropriate, the scripted item is prevented from being communicated to a user.

Cross-site scripting prevention in dynamic content

A system and method in one embodiment includes modules for running a test script to generate a request to a target application, receiving a response from the target application, and running a detector script to inspect the response for a vulnerability. More specific embodiments include a target web site, populating a work in a queue, where the work corresponds to content in the response, and running a second test script or detector script to generate a follow-up request to the application if the vulnerability has been identified in the response. Other embodiments include extracting the work from the queue, and running a second test script corresponding to the extracted work. Other embodiments include storing an injection in an injection cache, de-registering the injection from the injection cache if it is identified in the response, and re-crawling the application, if the injection has not been de-registered from the injection cache.

System and method for application security assessment

Growing community of inventors

Redmond, WA, United States of America

Michael Andrews