Patent ID: 11921862
Assignee: JPMORGAN CHASE BANK, N.A.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method for rules-based automated penetration testing to certify release candidates, comprising:
receiving, at a penetration test computer program executed by a computer processor, a plurality of uniform resource locators (URLs) for an application to be tested;
retrieving, by the penetration test computer program and from a rules pack in a database, a penetration test rule, wherein the penetration test rule includes a URL injectible value, a validation algorithm indication, a URL parameter, and a response code;
generating, by a URL scanner and malformer computer program, a malformed URL, wherein generating the malformed URL includes:
determining that a first URL of the plurality of URLs includes the URL parameter; and
injecting the URL injectible value as a value of the URL parameter included in the first URL of the plurality of URLs;

firing, by the penetration test computer program, the malformed URL;
receiving, by the penetration test computer program, an output from the application; and
executing a validation algorithm that is indicated by the validation algorithm indication on the output from the application.