Patent ID: 11921862
Assignee: JPMORGAN CHASE BANK, N.A.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 9:
10. A system for rules-based automated penetration testing to certify release candidates, comprising:
a server comprising at least one computer processor executing a penetration test computer program and a uniform resource locator (URL) scanner and malformer computer program;
a URL store that stores URLs for an application to be tested; and
a rule pack stored in a database wherein the rule pack comprises a penetration test rule, wherein the penetration test rule includes a URL injectible value, a validation algorithm indication, a URL parameter, and a response code;
wherein:
the penetration test computer program receives, from the URL store, a plurality of URLs for the application to be tested;
the penetration test computer program retrieves, from the rule pack in the database, the penetration test rule;
the URL scanner and malformer computer program generates a malformed URL, wherein the URL scanner and malformer computer program:
determines that a first URL of the plurality of URLs includes the URL parameter; and

injects the URL injectible value as a value of the URL parameter included in the first URL of the plurality of URLs;
the penetration test computer program fires the malformed URL;
the penetration test computer program receives an output from the application; and
the penetration test computer program executes a validation algorithm that is indicated by the validation algorithm indication on the output from the application.