The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 28, 2016

Filed:

Dec. 02, 2013
Applicant:

Alibaba Group Holding Limited, Grand Cayman, KY;

Inventors:

Rong Zhu, Beijing, CN;

Xiaoshuan Li, Beijing, CN;

Ziyi Yi, Beijing, CN;

Tianhe Xu, Beijing, CN;

Assignee:

Alibaba Group Holding Limited, Grand Cayman, KY;

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/00 (2006.01); G06F 21/55 (2013.01); G06F 21/54 (2013.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
G06F 21/55 (2013.01); G06F 21/54 (2013.01); H04L 63/145 (2013.01); H04L 63/1466 (2013.01); G06F 2221/2119 (2013.01);
Abstract

The present disclosure provides techniques for monitoring a cross site scripting attack. These techniques may receive and reply to, by a computing device, a service request from a client terminal. The computing device may then redefine a scripting internal function applied by the cross site scripting attack, and return redefined information for the scripting internal function to the client terminal. The computing device may monitor calling information of the client terminal in relation to the redefined scripting internal function, and analyze the security of the calling information. The computing device may monitor an attacking source, an attacking time period, leakage information in the attack, and/or a vulnerability point in the attack that are associated with the cross site scripting attack.


Find Patent Forward Citations

Loading…