Patent ID: 11895138
Assignee: F5, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 0:
1. A method for web scanning, the method implemented by a network traffic management system comprising one or more application security apparatuses, web scanner apparatuses, client devices, or server devices, and the method comprising:
determining when there are one or more changes in a webpage requested by a client and retrieved from a server based on a comparison of one or more portions of the webpage with stored information associated with a previous scan of the webpage;
generating a sitemap document associated with the webpage, when the determination indicates that there are one or more changes in the webpage, wherein the sitemap document is a structure of the webpage with identified changes between the one or more portions of the webpage with the stored information associated with the previous scan of the webpage; and
scanning the sitemap document to determine when there are one or more vulnerabilities associated with the webpage based on one or more uniform resource locators (URLs) in the sitemap document that are associated with the one or more changes, wherein when the determination indicates that there are one or more vulnerabilities associated with the webpage:
modifying one or more security policies based on the identified one or more vulnerabilities; and
executing a corrective action, prior to sending the webpage to the client and based on the modified one or more security policies, to patch the one or more vulnerabilities by removing content of the webpage that is associated with the one or more vulnerabilities.