Patent ID: 7984501
Filing Date: 2011-07-19
Classification: G06F

Abstract:
1. A scanning apparatus to support the execution steps of a web application security analysis on a component-oriented context, comprising: a) scanning hardware based on multi-bit instruction processor technology to support a software component; b) a first engine to parse and retrieve web components from web application; c) a second engine to interpret and detect web components on web scripts; d) a scanning engine to analyze components and determine their relationship with a target web application and run security checks; e) a fingerprint database stored in a database which contains a large number of common patterns for platforms, web servers, and databases; f) a false-positive database stored in a database to assist in determining possible false-positives during discovery process; g) a transactions database for storing web application components and inferences from the first engine, the second engine, and the scanning engine; h) a report engine to transform the database data into a final result analysis containing recommendations for fixing issues; and i) an XML library to transform the final result analysis into a portable data format.