首页> 外国专利> METHOD FOR PROTECTING WEB APPLICATIONS BY AUTOMATICALLY GENERATING APPLICATION MODELS

METHOD FOR PROTECTING WEB APPLICATIONS BY AUTOMATICALLY GENERATING APPLICATION MODELS

机译:通过自动生成应用程序模型保护Web应用程序的方法

摘要

The technical solution relates to the field of detecting attacks on web applications using positive security models and building web application models using machine learning methods. The computer-implemented method to protect web applications from various classes of attacks, including logical attacks, based on the automatic building of web application models, which automatically collect training data on the functioning of the web application; at least one functional web application model is generated by parsing and analyzing the training data obtained in the previous step; false positives for the rules for detecting attacks on web applications are recognized based on the training data and the generated models of the web application functioning; the web application protection mode is included, in which new incoming requests to a web application and its responses are analyzed, the degree of normality or anomaly of these requests is assessed, and then actions are taken on their further processing. The technical result is an increase in the performance of an intelligent firewall. 2 indep. cl., 9 dep, cl., 15 fig.
机译:该技术解决方案涉及以下领域:使用肯定的安全模型来检测对Web应用程序的攻击,以及使用机器学习方法来构建Web应用程序模型。一种基于计算机的方法,可基于自动构建Web应用程序模型来保护Web应用程序免受各种攻击,包括逻辑攻击,该模型自动收集有关Web应用程序功能的培训数据;通过解析和分析上一步获得的训练数据,生成至少一个功能性网络应用模型;根据训练数据和生成的Web应用程序功能模型,识别检测Web应用程序攻击的规则的误报;包含Web应用程序保护模式,其中分析了对Web应用程序的新传入请求及其响应,评估了这些请求的正常程度或异常程度,然后对它们的进一步处理采取了措施。技术结果是提高了智能防火墙的性能。 2独立。 cl。,9 dep,cl。,15图。

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号