Patent ID: 8281401

Claim:
A method for analyzing security vulnerabilities in web-based applications, the method comprising: executing one or more client-side applications in a monitored environment at a client, wherein at least one of the client-side applications is written such that not all entry points to the web-based applications being analyzed for security vulnerabilities are determinable from a scan of application code of the at least one client side application provided to the client, wherein the monitored environment isolates at least a part of the at least one of the client-side applications from the web-based applications; extracting path parameters and data parameters, using tools of the monitored environment, from the one or more client-side applications wherein the path parameters and data parameters refer to web servers servicing the one or more client-side applications; modifying the path parameters or data parameters with user-defined data to generate test data; transmitting the test data to the web servers; and determining if any responses received in response to the test data are indicative of security vulnerabilities in the web-based applications being analyzed for security vulnerabilities.