logo

For the Inventor, By the Inventor

The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 9521133 B1

PDFFull Text
Date of Patent:
Dec. 13, 2016

Filed:

Apr. 21, 2015

Moving target defense against cross-site scripting

Applicants:

Bei-tseng Chu, Charlotte, NC (US);

Joe Portner, Charlotte, NC (US);

Joel Kerr, Charlotte, NC (US);

Ehab Al-shaer, Charlotte, NC (US);

Inventors:

Bei-Tseng Chu, Charlotte, NC (US);

Joe Portner, Charlotte, NC (US);

Joel Kerr, Charlotte, NC (US);

Ehab Al-Shaer, Charlotte, NC (US);

Assignee:

The University of North Carolina at Charlotte, Charlotte, NC (US);

Attorneys:

Clements Bernard PLLC

Christopher L. Bernard

Lawrence A. Baratta, Jr.

Primary Examiner:

James Turchen

Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 29/08 (2006.01); G06F 21/12 (2013.01); G06F 21/56 (2013.01); G06F 21/57 (2013.01); G06F 21/51 (2013.01);
U.S. Cl.
CPC ...
H04L 63/08 (2013.01); G06F 21/128 (2013.01); G06F 21/566 (2013.01); G06F 21/567 (2013.01); G06F 21/577 (2013.01); H04L 63/1441 (2013.01); H04L 63/1483 (2013.01); H04L 67/02 (2013.01); H04L 67/10 (2013.01); H04L 67/1002 (2013.01); H04L 67/1004 (2013.01); G06F 21/51 (2013.01); G06F 2221/2115 (2013.01); G06F 2221/2119 (2013.01); H04L 63/168 (2013.01); H04L 67/1029 (2013.01); H04L 67/1031 (2013.01);
Abstract

A method, in a server, implementing a moving target defense against cross-site scripting includes receiving a request for a web page, wherein the server has N versions of the web page each with a mutated version of JavaScript; selecting a web page of the N versions; and sending an indication of the mutated version of JavaScript associated with the web page in response to the request. Another method, in a client device, using a moving target defense against cross-site scripting includes requesting a web page; receiving an indication of a mutated version of JavaScript for the web page; and adjusting a JavaScript interpreter based on the mutated version of JavaScript for the web page.

Find Patent Forward Citations

Chu, Bei-Tseng. (2016). Moving target defense against cross-site scripting (U.S. Patent No. 9521133). U.S. Patent and Trademark Office. https://idiyas.com/patent/badge/9521133

Data source: USPTO (United States Patent and Trademark Office) public patent records. Weekly synchronization. How IDiyas builds this profile

Loading…