Search International and National Patent Collections

1. (WO2018013278) METHODS AND SYSTEMS FOR USING SELF-LEARNING TECHNIQUES TO PROTECT A WEB APPLICATION

Pub. No.:    WO/2018/013278    International Application No.:    PCT/US2017/037279
Publication Date: Fri Jan 19 00:59:59 CET 2018 International Filing Date: Wed Jun 14 01:59:59 CEST 2017
IPC: G06F 21/55
G06F 21/53
H04L 29/06
Applicants: QUALCOMM INCORPORATED
Inventors: CHAO, Hui
ISLAM, Nayeem
CASCAVAL, Gheorghe Calin
Title: METHODS AND SYSTEMS FOR USING SELF-LEARNING TECHNIQUES TO PROTECT A WEB APPLICATION
Abstract:
Various embodiments include methods for protecting a web application server from non-benign web application usage. Embodiment methods may include receiving from a client device a service request message that includes information suitable for causing a web application operating on the web application server to perform one or more operations. In response, a processor, such as within the web application server or another network device, may analyze usage of the web application by the client device via a combination of a honeypot component, a sandboxed detonator component, and a Web Application Firewall (WAF) component. Analysis results may be generated by analyzing the received service request message or a server response message sent by the web application server. The analysis results may be used to identify non-benign web application usage. Actions may be taken to protect the web application server and/or the client device from the identified non-benign web application usage.