Entit Software LLC

Micro Focus Lcc

Prajakta Subhash Jagdale

Sasi Siddharth Muthurajan

Matias Madou

Ronald Joseph Sechman

Philip Edward Hamer

Jeremy C Brooks

Nidhi Govindram Kejriwal

Iftach Ragoler

Leonid Promyshlyansky Bensman

Example embodiments disclosed herein relate to determining terms for a security test. Terms associated with an application under test are determined. The terms are filtered with words in a dictionary to generate a filtered set or wordlist. The set or wordlist is used for input to the application under test for the security test.

Determining terms for security test

Example embodiments disclosed herein relate to a security test. A crawl of an application under test (AUT) is performed to determine an attack surface using crawl sessions. One or more parameters of the attack surface are probed during the respective crawl sessions. A trace is requested from an observer for the probe of the one or more parameters. Attack suggestions are received from the observer based on the trace of the one or more parameters.

Application test using attack suggestions

Disclosed herein are techniques for determining vulnerabilities in applications under testing. It is determined whether a first database instruction of an application enters information into a database and whether a second database instruction thereof obtains said information from the database. If the first database instruction enters the information in the database and the second database instruction obtains the information therefrom, it is determined whether the application is vulnerable to entry of malicious code via the database.

Determining application vulnerabilities

Growing community of inventors

Mountain View, CA, United States of America

Prajakta Subhash Jagdale