专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08453255B2 Method for monitoring stored procedures 有权
标题翻译：监控存储过程的方法
公开(公告)号：US08453255B2
公开(公告)日：2013-05-28
申请号：US13245913
申请日：2011-09-27
申请人： Amichai Shulman , Tal Ryterski
发明人： Amichai Shulman , Tal Ryterski
IPC分类号： G06F7/04
CPC分类号： G06F17/30415 , G06F21/552 , G06F21/6281
摘要： A method for monitoring stored procedures is disclosed. The method performs on-line and inline monitoring of stored procedures for detecting table access operations performed by the procedures. This allows the enforcing of access control policies, correlation rules and audit rules on stored procedures. The monitoring is performed using mapping information gathered about each stored procedure that can be executed by a database server. The method comprises parsing an incoming transaction submitted by a client; determining whether the incoming transaction includes an invocation of a stored procedure; obtaining a query group corresponding to the stored procedure; applying an access control policy on the query group; and asserting an unauthorized event if the query group is not compliant with the access control policy.
摘要翻译：公开了一种监视存储过程的方法。该方法执行对由过程执行的表访问操作的存储过程的在线和在线监视。这允许对存储过程执行访问控制策略，关联规则和审核规则。使用针对可由数据库服务器执行的每个存储过程收集的映射信息执行监视。该方法包括解析客户端提交的传入事务; 确定所述传入交易是否包括对存储过程的调用; 获取与存储过程相对应的查询组; 对查询组应用访问控制策略; 并且如果查询组不符合访问控制策略，则断言未经授权的事件。

2. 发明授权

US08392963B2 Techniques for tracking actual users in web application security systems 有权
标题翻译：跟踪Web应用程序安全系统中实际用户的技术
公开(公告)号：US08392963B2
公开(公告)日：2013-03-05
申请号：US11563589
申请日：2006-11-27
申请人： Amichai Shulman , Gur Shatz , Tal Ryterski
发明人： Amichai Shulman , Gur Shatz , Tal Ryterski
IPC分类号： G06F7/04 , G06F17/30
CPC分类号： H04L63/08 , H04L63/1425 , H04L63/1441
摘要： A method for tracking and identifying an identity of a user accessing a web application. An application normal behavior profile (NBP), wherein said NBP includes a plurality of authentication identifiers of the web application is generated. It is determined using the NBP whether an authentication request submitted by the user was successful. A first actionable data on a successful authentication request is saved. A second actionable data on an unsuccessful authentication request is saved.
摘要翻译：用于跟踪和识别访问web应用的用户的身份的方法。一种应用程序正常行为简档（NBP），其中所述NBP包括生成所述web应用的多个认证标识符。使用NBP确定用户提交的认证请求是否成功。保存成功认证请求的第一个可操作的数据。保存不成功身份验证请求的第二个可操作数据。

3. 发明授权

US08056141B2 Method for monitoring stored procedures 有权
标题翻译：监控存储过程的方法
公开(公告)号：US08056141B2
公开(公告)日：2011-11-08
申请号：US11854641
申请日：2007-09-13
申请人： Amichai Shulman , Tal Ryterski
发明人： Amichai Shulman , Tal Ryterski
IPC分类号： G06F7/04
CPC分类号： G06F17/30415 , G06F21/552 , G06F21/6281
摘要： A method for monitoring stored procedures is disclosed. The method performs on-line and inline monitoring of stored procedures for detecting table access operations performed by the procedures. This allows the enforcing of access control policies, correlation rules and audit rules on stored procedures. The monitoring is performed using mapping information gathered about each stored procedure that can be executed by a database server. The method comprises parsing an incoming transaction submitted by a client; determining whether the incoming transaction includes an invocation of a stored procedure; obtaining a query group corresponding to the stored procedure; applying an access control policy on the query group; and asserting an unauthorized event if the query group is not compliant with the access control policy.
摘要翻译：公开了一种监视存储过程的方法。该方法执行对由过程执行的表访问操作的存储过程的在线和在线监视。这允许对存储过程执行访问控制策略，关联规则和审核规则。使用针对可由数据库服务器执行的每个存储过程收集的映射信息执行监视。该方法包括解析客户端提交的传入事务; 确定所述传入交易是否包括对存储过程的调用; 获取与存储过程相对应的查询组; 对查询组应用访问控制策略; 并且如果查询组不符合访问控制策略，则断言未经授权的事件。

4. 发明申请

US20070124806A1 TECHNIQUES FOR TRACKING ACTUAL USERS IN WEB APPLICATION SECURITY SYSTEMS 有权
标题翻译：跟踪WEB应用程序安全系统中的实际用户的技术
公开(公告)号：US20070124806A1
公开(公告)日：2007-05-31
申请号：US11563589
申请日：2006-11-27
申请人： Amichai Shulman , Gur Shatz , Tal Ryterski
发明人： Amichai Shulman , Gur Shatz , Tal Ryterski
IPC分类号： H04L9/32
CPC分类号： H04L63/08 , H04L63/1425 , H04L63/1441
摘要： A method for tracking and identifying an identity of a user accessing a web application. An application normal behavior profile (NBP), wherein said NBP includes a plurality of authentication identifiers of the web application is generated. It is determined using the NBP whether an authentication request submitted by the user was successful. A first actionable data on a successful authentication request is saved. A second actionable data on an unsuccessful authentication request is saved.
摘要翻译：用于跟踪和识别访问web应用的用户的身份的方法。一种应用程序正常行为简档（NBP），其中所述NBP包括生成所述web应用的多个认证标识符。使用NBP确定用户提交的认证请求是否成功。保存成功认证请求的第一个可操作的数据。保存不成功身份验证请求的第二个可操作数据。

5. 发明授权

US08713682B2 Dynamic learning method and adaptive normal behavior profile (NBP) architecture for providing fast protection of enterprise applications 有权
标题翻译：动态学习方法和自适应正常行为简档（NBP）架构，为企业应用提供快速保护
公开(公告)号：US08713682B2
公开(公告)日：2014-04-29
申请号：US12814753
申请日：2010-06-14
申请人： Amichai Shulman , Michael Boodaei , Shlomo Kramer
发明人： Amichai Shulman , Michael Boodaei , Shlomo Kramer
IPC分类号： G06F11/00 , G06F21/57 , H04L29/06
CPC分类号： H04L63/14 , G06F17/30306 , G06F21/577 , H04L41/142 , H04L41/16 , H04L43/00 , H04L43/106 , H04L63/102 , H04L63/1433
摘要： An adaptive normal behavior profile (NBP) architecture for providing fast protection of enterprise applications are disclosed. The adaptive NBP architecture includes a plurality of profile items. Each profile item includes a plurality of profile properties holding the descriptive values of the respective item. An application-level security system can identify and prevent attacks targeted at enterprise applications by matching application events against at least a single profile item in the adaptive NBP.
摘要翻译：公开了一种用于提供企业应用程序快速保护的适应性正常行为简档（NBP）架构。自适应NBP架构包括多个简档项。每个简档项目包括保持相应项目的描述值的多个简档属性。应用级安全系统可以通过将应用事件与自适应NBP中的至少一个配置文件项匹配来识别和防止针对企业应用程序的攻击。

6. 发明授权

US08051484B2 Method and security system for indentifying and blocking web attacks by enforcing read-only parameters 有权
标题翻译：通过执行只读参数来识别和阻止Web攻击的方法和安全系统
公开(公告)号：US08051484B2
公开(公告)日：2011-11-01
申请号：US11423364
申请日：2006-06-09
申请人： Amichai Shulman , Gur Shatz , Ido Yellin
发明人： Amichai Shulman , Gur Shatz , Ido Yellin
IPC分类号： G06F21/00
CPC分类号： H04L63/1416 , G06F21/554 , G06F2221/2141 , G06F2221/2149 , H04L63/1441
摘要： A method for detecting and blocking web attacks, the method comprising identifying read-only parameters by parsing responses received from uniform resource locators. The combinations of binding correlation values (BCVs) of the read-only parameters are compared to their respective previously observed values.
摘要翻译：一种用于检测和阻止web攻击的方法，所述方法包括通过解析从统一资源定位符接收的响应来识别只读参数。将只读参数的结合相关值（BCV）的组合与其各自先前观察到的值进行比较。

7. 发明授权

US08869279B2 Detecting web browser based attacks using browser response comparison tests launched from a remote source 有权
标题翻译：使用从远程源启动的浏览器响应比较测试来检测基于Web浏览器的攻击
公开(公告)号：US08869279B2
公开(公告)日：2014-10-21
申请号：US13429247
申请日：2012-03-23
申请人： Amichai Shulman , Tal Arieh Be'ery , Tomer Bitton
发明人： Amichai Shulman , Tal Arieh Be'ery , Tomer Bitton
IPC分类号： G06F11/00 , G06F12/14 , G06F12/16 , G08B23/00 , H04L29/06 , H04L29/08
CPC分类号： H04L63/145 , H04L63/1433 , H04L63/1466 , H04L63/20 , H04L67/02 , H04L67/2804
摘要： The detection of web browser-based attacks using browser test launched from a remote source is described. In one example, it is determined that a test should be performed responsive to receiving an HTTP message sent by a client device and a policy. The test is performed with the client device to determine only whether content intended to be communicated between the HTTP client and the web application server using an HTTP message has been modified by malware on the HTTP client. The test includes the sending of an HTTP response to the HTTP client. The results of the test are analyzed and defensive measures are taken.
摘要翻译：描述了使用从远程源启动的浏览器测试来检测基于Web浏览器的攻击。在一个示例中，确定应当响应于接收到由客户端设备发送的HTTP消息和策略来执行测试。使用客户端设备进行测试，以确定仅HTTP客户端上的HTTP客户端和Web应用程序服务器之间的内容是否已被HTTP客户端上的恶意软件修改。测试包括向HTTP客户端发送HTTP响应。分析测试结果，采取防御措施。

8. 发明授权

US07743420B2 Dynamic learning method and adaptive normal behavior profile (NBP) architecture for providing fast protection of enterprise applications 有权
标题翻译：动态学习方法和自适应正常行为简档（NBP）架构，为企业应用提供快速保护
公开(公告)号：US07743420B2
公开(公告)日：2010-06-22
申请号：US10991467
申请日：2004-11-19
申请人： Amichai Shulman , Michael Boodaei , Shlomo Kremer
发明人： Amichai Shulman , Michael Boodaei , Shlomo Kremer
IPC分类号： G06F11/00
CPC分类号： H04L63/14 , G06F17/30306 , G06F21/577 , H04L41/142 , H04L41/16 , H04L43/00 , H04L43/106 , H04L63/102 , H04L63/1433
摘要： A dynamic learning method and an adaptive normal behavior profile (NBP) architecture for providing fast protection of enterprise applications are disclosed. The adaptive NBP architecture includes a plurality of profile items. Each profile item includes a plurality of profile properties holding the descriptive values of the respective item. An application-level security system can identify and prevent attacks targeted at enterprise applications by matching application events against at least a single profile item in the adaptive NBP.
摘要翻译：公开了用于提供企业应用的快速保护的动态学习方法和自适应正常行为简档（NBP）架构。自适应NBP架构包括多个简档项。每个简档项目包括保持相应项目的描述值的多个简档属性。应用级安全系统可以通过将应用事件与自适应NBP中的至少一个配置文件项匹配来识别和防止针对企业应用程序的攻击。

9. 发明申请

US20060272008A1 METHOD AND SECURITY SYSTEM FOR INDENTIFYING AND BLOCKING WEB ATTACKS BY ENFORCING READ-ONLY PARAMETERS 有权
标题翻译：通过执行只读参数对网页攻击进行识别和阻断的方法和安全系统
公开(公告)号：US20060272008A1
公开(公告)日：2006-11-30
申请号：US11423364
申请日：2006-06-09
申请人： Amichai Shulman , Gur Shatz , Ido Yellin
发明人： Amichai Shulman , Gur Shatz , Ido Yellin
IPC分类号： H04L9/32
CPC分类号： H04L63/1416 , G06F21/554 , G06F2221/2141 , G06F2221/2149 , H04L63/1441
摘要： A method for detecting and blocking web attacks, the method comprising identifying read-only parameters by parsing responses received from uniform resource locators. The combinations of binding correlation values (BCVs) of the read-only parameters are compared to their respective previously observed values.
摘要翻译：一种用于检测和阻止web攻击的方法，所述方法包括通过解析从统一资源定位符接收的响应来识别只读参数。将只读参数的结合相关值（BCV）的组合与其各自先前观察到的值进行比较。

10. 发明申请

US20050188215A1 Method and apparatus for high-speed detection and blocking of zero day worm attacks 有权
标题翻译：用于高速检测和阻止零日蠕虫攻击的方法和装置
公开(公告)号：US20050188215A1
公开(公告)日：2005-08-25
申请号：US10953557
申请日：2004-09-30
申请人： Amichai Shulman , Michael Boodaei , Shlomo Kremer
发明人： Amichai Shulman , Michael Boodaei , Shlomo Kremer
IPC分类号： H04L9/32 , H04L29/06 , H04L29/08
CPC分类号： H04L63/1416 , H04L63/145 , H04L67/02 , H04L69/22
摘要： A method for detection and blocking of zero day worm attacks is disclosed. A zero day worm attack is the initial appearance of a new or revised Web worm. The method compares a hypertext transfer protocol (HTTP) request sent from an attacking computer (or server) to a predefined behavior profile of a protected Web application in order to detect a worm attack. A zero day worm attack based on the first data packet of an HTTP request can be detected.
摘要翻译：公开了一种用于检测和阻止零日蠕虫攻击的方法。零日蠕虫攻击是新的或修改的Web蠕虫的初始出现。该方法将从攻击计算机（或服务器）发送的超文本传输协议（HTTP）请求与受保护的Web应用程序的预定义行为配置文件进行比较，以便检测蠕虫攻击。可以检测到基于HTTP请求的第一数据分组的零日蠕虫攻击。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式