Patent ID: 8370929

Claim:
A method of testing a web application, wherein a web application is a program that operates on a server and interacts with clients that access the program over a network, the method comprising: determining which web application uniform resource identifiers (URIs) are used to access each of a subset of web applications on a system, each web application being operable to accept parameters that define results generated from the web application; determining, for each web application of the subset of web applications, if more than a threshold of the URIs are present for the web application; selecting, for each web application of the subset of web applications, a subset of less than all of the URIs for the web application when the threshold is exceeded for that web application, wherein the subset of URIs is selected in a manner that is partly independent of an order generated; and using, for each web application of the subset of web applications, a test suite that executes electronic interactions with the web application to perform a security scan on the web application using the selected subset of URIs, the electronic interactions including the web application sending HTTP client requests to the web application and evaluating a response to identify vulnerabilities in the web application.