Hewlett-packard Development Company, L.P.

Micro Focus Lcc

Entit Software LLC

Steve Alan Millar

Kevin Allen Williams

Caleb Sima

Brian Charles King

Bryan Sullivan

Raymond Kelly

Stephen Daniel Hardeman

Gerald Eugene Sullivan

David Tillery

In one example in accordance with the present disclosure, a method may include receiving an initial document object model (DOM) corresponding to an HTML page structure including a plurality of executable JavaScript code and simulating user interaction with an executable JavaScript code belonging to the plurality in the HTML page structure. The method may include adjusting the initial DOM based on the simulated user interaction, generating byte code corresponding to the adjust DOM and analyzing the byte code using a set of static rules.

Javascript security testing

In one example in accordance with the present disclosure, a method may include receiving code corresponding to an HTML page structure including a plurality of executable JavaScript code and enumerating a branching path in the JavaScript code. The method may include determining a branch of the branching path that would not execute during normal operation of a browser executing the JavaScript code. The method may also include generating an artificial condition for the branch and executing the branch using the artificial condition.

Javascript path enumeration

A vulnerability assessment tool that is operative to analyze web sites by simultaneously operating a crawling process and an audit process. Once the crawling process is invoked, the results are provided to the audit process. The audit process, rather than waiting until the crawl process is completed, simultaneously audits the web site based on the already provided crawl results. The results of the audit are also fed back to the crawl process to further enhance the crawl.

Integrated crawling and auditing of web applications and web content

Growing community of inventors

Dawsonville, GA, United States of America

Steve Alan Millar