Patent ID: 9619651
Date: 2017-04-11
CPC Classifications: G06F,H04L

Claim:
1. A method of creating a fault-inducing transaction representation in a network, the method comprising: interjecting a pattern with fault-inducing sub-fields, where the pattern is an expression including a literal string and a wildcard character class; and using the expression, of the pattern, to form a plurality of subsequent expressions that can be used by a target system to detect and trigger on the network at least one transaction that matches the expression, wherein said using the expression comprises providing a grammar injection into the expression and providing a value injection into the expression, in order to form the plurality of subsequent expressions; wherein the expression comprises value fields and a delimiter between the value fields; wherein the grammar injection comprises modifying an order, a structure, and a character of the value fields and delimiter in the expression; wherein the value injection comprises modifying an input field value in the expression; wherein the plurality of subsequent expressions comprises a plurality of mutations of the pattern; wherein the transaction is used to test for vulnerabilities in the target system.