Patent · US Active

HTTP log integration to web application testing

US11297091B2 · kind B2 · utility

1Cited by

11References

20Claims

0Family size

Assignee

Bank of America Corporation · US

Inventors

Peggy J. Qualls · Oswego, US
Travis E. Hoyt · Lexington, US
Cary Hooper · Fort Worth, US

Key dates

Filing date	Sep 24, 2019
Grant date	Apr 5, 2022
Priority date	—
Expiry date	Dec 11, 2040

Classification

Technology area (CPC G)Physics
CPC primaryG06F2221/034
WIPO fieldComputer technology
WIPO sectorElectrical engineering

Abstract

A method for securely testing a web application is provided. The method may include analyzing each HTTP log entry that may be included in a centralized web server log file of a web application. Each HTTP log entry may include an endpoint. The endpoint may be a URL path correlating to a location on the web application. Based on the analysis, the method may include identifying each endpoint included in the web application and generating a first web application site-map based on each identified endpoint. The method may further include determining one or more endpoints on the first web application site map, that may be absent from a second web application site map. The second web application site map may include each crawled endpoint within the web application identified via a crawling of the web application by a web application attack tool for identifying security vulnerabilities.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.