Patent Document ID: 10044752
Application ID: 14870537

Base Claim:
1. A computer-implemented method of detecting null-byte injection, comprising executing, on at least one processor, the steps of: generating an output finite-state machine using a set of directed graphs, wherein each one of the directed graphs in the set corresponds to a singly encoded null-byte that is encoded according to a corresponding one of a set of character encoding methods, and wherein the output finite-state machine models computation for detecting at least one multiply encoded null-byte, the multiply encoded null-byte encoded according to at least one of the character encoding methods contained in the set of character encoding methods; loading the output finite-state machine into an attack detection and prevention system; receiving, by the attack detection and prevention system, at least one input text; and detecting, by the attack detection and prevention system in response to the output finite-state machine loaded in the attack detection and prevention system and the input text, an instance of the multiply encoded null-byte within the input text.

---

Claim 21:
21. The method of claim 1 wherein the set of character encoding methods includes i) octal C backslash-escape sequence encoding, ii) hexadecimal C backslash-escape sequence encoding, iii) UTF-16 C backslash-escape sequence encoding (UTF-16), iv) UTF-32 C backslash-escape sequence encoding (UTF-32), v) URL encoding, vi) decimal XML encoding, and vii) hexadecimal XML encoding; and wherein the multiply encoded null-byte is encoded according to at least two different character encoding methods in the set of character encoding methods.