Systems and methods for inhibiting attacks on applications

US10305919B2 · kind B2 · utility

Assignee

• The Trustees of Columbia University in the City of New York · US

Inventors

• Michael E. Locasto · Mina, US
• Salvatore J. Stolfo · Ridgewood, US
• Angelos D. Keromytis · New York, US
• Ke Wang · New York, US

Key dates

• Filing date: May 9, 2016
• Grant date: May 28, 2019
• Expiry date: May 9, 2036

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/1441
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

In accordance with some embodiments of the present invention, systems and methods that protect an application from attacks are provided. In some embodiments of the present invention, input from an input source, such as traffic from a communication network, can be routed through a filtering proxy that includes one or more filters, classifiers, and/or detectors. In response to the input passing through the filtering proxy to the application, a supervision framework monitors the input for attacks (e.g., code injection attacks). The supervision framework can provide feedback to tune the components of the filtering proxy.