The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jul. 06, 2021

Filed:

Jul. 19, 2019
Applicant:

Microsoft Technology Licensing, Llc, Redmond, WA (US);

Inventors:

Yosef Dinerstein, Haifa, IL;

Oren Yossef, Haifa, IL;

Tomer Weisberg, Haifa, IL;

Assaf Akrabi, Haifa, IL;

Tomer Rotstein, Haifa, IL;

Assignee:
Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 16/2455 (2019.01); G06F 21/62 (2013.01); G06F 21/55 (2013.01); G06F 16/24 (2019.01); G06F 16/23 (2019.01); H04L 29/06 (2006.01); G06F 21/64 (2013.01);
U.S. Cl.
CPC ...
H04L 63/1466 (2013.01); G06F 16/24564 (2019.01); G06F 21/554 (2013.01); G06F 21/6227 (2013.01); G06F 21/64 (2013.01); G06F 16/23 (2019.01); G06F 16/24 (2019.01);
Abstract

Computer systems, devices, and associated methods of detecting and/or preventing injection attacks in databases are disclosed herein. In one embodiment, a method includes determining whether parsing a database statement received from an application on the application server cause a syntax error in a database. In response to determining that parsing the received database statement does not cause a syntax error, determining whether an identical syntactic pattern already exists. In response to determining that an identical syntactic pattern already exists in the database, the method includes indicating that the received database statement does not involve an injection attack.


Find Patent Forward Citations

Loading…