Patent ID: 11899798
Assignee: HCL TECHNOLOGIES LIMITED
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 2:
3. A system of verifying at least one of a Regular Expression (regex) sanitizer and validator in an application testing process, the system comprising:
a processor; and
a memory coupled to the processor, wherein the memory stores a set of instructions to be executed by the processor, and wherein the processor is configured to:
process, at least one of a regex sanitizer and validator configured for checking a tainted input in a user's input;
verify, the at least one of the regex sanitizer and validator before checking for the tainted input through the regex sanitizer and validator, wherein the verifying comprises:
apply, the at least one of the regex sanitizer and validator over multiple predefined tainted strings associated with a previously checked input received from the user;
check, if an output obtained after applying the at least one of the regex sanitizer and validator is one of a tainted output or a non-tainted output;
qualify, the at least one of the regex sanitizer and validator to be a valid regex sanitizer and validator based on the checking; and
tag, each of the valid regex sanitizer and validator with a validation signature, wherein the at least one of the valid regex sanitizer and validator is used for checking the tainted input in the user's input;

store each of the valid regex sanitizer and validator along with the validation signature as a previously verified valid regex sanitizer and validator, wherein the validation signature is defined according to each of the regex sanitizer and validator, a regex of the regex sanitizer and validator, a code path followed by the regex sanitizer and validator and the vulnerability type being sanitized;
track, if at least one of a new regex sanitizer and validator to be verified is associated with a signature;
match the validation signature of the at least one of the valid regex sanitizer and validator with the signature associated with the at least one of the new regex sanitizer and validator to be verified in response to the tracking; and
in response to the match of the validation signature with the signature associated with the at least one of the new regex sanitizer and validator being successful, verify the at least one of the new regex sanitizer and validator directly as the valid regex sanitizer and validator.