公开(公告)号：US20170024566A1

公开(公告)日：2017-01-26

申请号：US15069826

申请日：2016-03-14

申请人： RAPID7, LLC

发明人： Dan Kuykendall ,  Matthew Cohen ,  Dmitriy Kashitsyn ,  Andrew Tisdale ,  Michael J. Morton ,  Artem Astrakhantsev

IPC分类号： G06F21/57

CPC分类号： G06F21/577 ,  G06F2221/033 ,  G06F2221/034

摘要： The field of the invention relates to systems and methods for advanced dynamic analysis scanning for vulnerabilities using a universal translator. In an embodiment, the system includes a dynamic analysis scanner subsystem communicatively coupled to a networked computing system; the scanner subsystem is configured to crawl one or more dynamic web pages of the networked computing system, generate test data for the networked computing system, transmit the generated test data to the networked computing system, and record the networked computing system's response to the generated test data. The scanner may further comprise a universal translator configured to detect vulnerabilities and generate test data for the dynamic web pages of the networked computing system. The scanner subsystem may further comprise a smart scheduler.

摘要翻译： 本发明的领域涉及使用通用翻译器进行高级动态分析扫描漏洞的系​​统和方法。 在一个实施例中，系统包括通信地耦合到联网计算系统的动态分析扫描器子系统; 扫描器子系统被配置为爬行联网计算系统的一个或多个动态网页，生成联网计算系统的测试数据，将生成的测试数据传送到联网计算系统，并记录网络计算系统对生成测试的响应 数据。 扫描器还可以包括被配置成检测漏洞并为网络计算系统的动态网页生成测试数据的通用翻译器。 扫描器子系统还可以包括智能调度器。

公开(公告)号：US09317693B2

公开(公告)日：2016-04-19

申请号：US14060516

申请日：2013-10-22

申请人： RAPID7, LLC

发明人： Dan Kuykendall ,  Matthew Cohen ,  Dmitriy Kashitsyn ,  Andrew Tisdale ,  Michael J. Morton ,  Artem Astrakhantsev

IPC分类号： H04L29/06 ,  G06F21/57

CPC分类号： G06F21/577 ,  G06F2221/033 ,  G06F2221/034

摘要： The field of the invention relates to systems and methods for advanced dynamic analysis scanning for vulnerabilities using a universal translator. In an embodiment, the system includes a dynamic analysis scanner subsystem communicatively coupled to a networked computing system; the scanner subsystem is configured to crawl one or more dynamic web pages of the networked computing system, generate test data for the networked computing system, transmit the generated test data to the networked computing system, and record the networked computing system's response to the generated test data. The scanner may further comprise a universal translator configured to detect vulnerabilities and generate test data for the dynamic web pages of the networked computing system. The scanner subsystem may further comprise a smart scheduler.

摘要翻译： 本发明的领域涉及使用通用翻译器进行高级动态分析扫描漏洞的系​​统和方法。 在一个实施例中，系统包括通信地耦合到联网计算系统的动态分析扫描器子系统; 扫描器子系统被配置为爬行联网计算系统的一个或多个动态网页，生成联网计算系统的测试数据，将生成的测试数据传送到联网的计算系统，并记录联网的计算系统对生成的测试的响应 数据。 扫描器还可以包括被配置成检测漏洞并为网络计算系统的动态网页生成测试数据的通用翻译器。 扫描器子系统还可以包括智能调度器。

公开(公告)号：US10262142B2

公开(公告)日：2019-04-16

申请号：US15069826

申请日：2016-03-14

申请人： RAPID7, LLC

发明人： Dan Kuykendall ,  Matthew Cohen ,  Dmitriy Kashitsyn ,  Andrew Tisdale ,  Michael J. Morton ,  Artem Astrakhantsev

IPC分类号： G06F21/00 ,  G06F21/57

摘要： The field of the invention relates to systems and methods for advanced dynamic analysis scanning for vulnerabilities using a universal translator. In an embodiment, the system includes a dynamic analysis scanner subsystem communicatively coupled to a networked computing system; the scanner subsystem is configured to crawl one or more dynamic web pages of the networked computing system, generate test data for the networked computing system, transmit the generated test data to the networked computing system, and record the networked computing system's response to the generated test data. The scanner may further comprise a universal translator configured to detect vulnerabilities and generate test data for the dynamic web pages of the networked computing system. The scanner subsystem may further comprise a smart scheduler.