Patent ID: 8763103

Claim:
A method for protecting applications from attacks, the method comprising: receiving input from an input source that is attempting to reach an application over a communications network; transmitting the received input to a filtering proxy, wherein the filtering proxy comprises at least one signature-based filter that monitors the input for a plurality of known malicious behaviors and at least one anomaly-based filter that monitors the input for behavior outside a normal behavior model, and wherein the filtering proxy grades the received input and determines whether to drop the received input; if the filtering proxy determines that the received input is not an attack, transmitting the received input to a supervision framework that detects the attack on the application, repairs the application, and provides feedback relating to the attack to at least one of the signature-based filter and the anomaly-based filter; using the supervision framework to emulate the application with the received input; receiving an indication from the supervision framework that the received input is the attack; and in response to receiving the indication, dropping the received input and transmitting instructions to update at least one of the signature-based filter and the anomaly-based filter in the filtering proxy.