The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Nov. 19, 2024
Filed:
Dec. 15, 2021
Microsoft Technology Licensing, Llc, Redmond, WA (US);
Haim Saadia Bendanan, Tirat Carmel, IL;
Andrey Karpovsky, Kiryat Motzkin, IL;
Inbal Argov, Tel Aviv, IL;
Microsoft Technology Licensing, LLC, Redmond, WA (US);
Abstract
The processing of an incoming query targeted to a data store in a way that early detection of code injections can be achieved. Initial code injections, even if unsuccessful, can be used to adjust the code injections to more successfully perform harmful actions against the data store. Accordingly, early detection can be used to block attackers from experimenting against the data store. The early detection is accomplished by detecting when all or a portion of the query is structured in accordance with a query language, but does not follow the syntax recognized by the underlying data store. This is a good indication that the issuer of the query is performing a blind code injection, not knowing the type of the underlying data store.