Patent ID: 8959629
Filing Date: 2015-02-17
Classification: G06F,H04L

Abstract:
1. A runtime validation apparatus for applying a validation policy to output of an application during runtime in order to prevent an attack, the runtime validation apparatus comprising: at least one processor; a non-transitory computer-readable storage medium including instructions executable by the at least one processor, the instructions configured to implement, a runtime interceptor configured to intercept a server request for a requested web resource of the application from a client device to a server and a response to be transmitted from the server to the client device, the response including server response data generated by the server; an output validation policy identifier configured to identify an output validation policy from a database storing a plurality of output validation policies based on the requested web resource, the identified output validation policy representing a template that encompasses allowed server responses for the requested web resource, the template including a document structure identifying at least one static portion, the template identifying at least one dynamic portion, the at least one dynamic portion being assigned a data type; a validation evaluator configured to apply the identified output validation policy to an output of the application executing on the server including comparing the server response data with the template of the identified output validation policy to determine whether the server response data complies with the template of the identified output validation policy, the validation evaluator configured to compare the server response data with the template includes, a validation controller configured to permit the response to be transmitted to the client device if the response data complies with the template, the validation controller configured to block the response if at least a portion of the response data does not comply with the template.