The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Mar. 24, 2015
Filed:
May. 14, 2013
Anand Thakadu, Redmond, WA (US);
Anirban Bhattacharya, Bangalore, IN;
Kuldip Shetty, Sastan, IN;
Krishna Prasad Muraleedharan Pillai, Perumbavoor, IN;
Ravi Udaya Kumble, Bangalore, IN;
Sourav Bhattacharya, Fountain Hills, AZ (US);
Venu Aluri, Gudlavalleru, IN;
Vitesh Patel, Bilaspur, IN;
Anand Thakadu, Redmond, WA (US);
Anirban Bhattacharya, Bangalore, IN;
Kuldip Shetty, Sastan, IN;
Krishna Prasad Muraleedharan Pillai, Perumbavoor, IN;
Ravi Udaya Kumble, Bangalore, IN;
Sourav Bhattacharya, Fountain Hills, AZ (US);
Venu Aluri, Gudlavalleru, IN;
Vitesh Patel, Bilaspur, IN;
Wipro Limited, Bangalore, IN;
Abstract
This disclosure generally relates to computer security, and more particularly to methods and systems for application programming interface (API)-level intrusion detection. In some embodiments, a computer-readable medium is disclosed, storing instructions for: receiving an API call for a service at an API sandbox module; parsing the API call to extract at least one of: an API call name; and or one or more API call parameters; generating a copy of the at least one of: the API call name and or the one or more API call parameters; determining, via an intrusion detection rules execution engine, whether the API call violates one or more security rules obtained from a security rules object, using the copy of the at least one of: the API call name and or the one or more API call parameters; and providing an indication of whether the API call violates the one or more security rules.