IP Library Granted Patent US 7,620,851
Granted Patent B1
US 7,620,851 · App. 11/701,181 · Granted Nov 17, 2009

Fault injection methods and apparatus

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,620,851
App. No.
11/701,181
Granted
Nov 17, 2009
Kind
B1
Abstract

A method of testing a target in a network by fault injection, includes: defining a transaction baseline; modifying at least one of an order and a structure of the transaction baseline to obtain a modified transaction with malformed grammar; and transmitting the modified transaction to a target. The method may further include, receiving a feedback from the target to determine fault occurrence. An apparatus for testing a target in a network by fault injection, includes: a driver configured to generate patterns, where a pattern can generate a plurality of packets for transmission to the target, the pattern being represented by an expression with a literal string and a wild character class; and a network interface coupled to the driver and configured to transmit and receive network traffic.

Claims (87)

1. A method of testing a target in a network by fault injection, the method comprising:

defining a transaction baseline;

using the transaction baseline in order to create a supplement transaction;

modifying at least one of an order and a structure of the supplement transaction to obtain a modified transaction with malformed grammar; and

transmitting the modified transaction to a target;

wherein the modifying step comprises:

sending a single character and delimiter-value pair at a repeated large buffer in the transaction.

2. The method of claim 1 , further comprising:

after transmitting the modified transaction, receiving a feedback from the target to determine fault occurrence.

3. The method of claim 1 wherein the modifying step comprises:

removing a field from the transaction.

4. The method of claim 1 wherein the modifying step comprises:

duplicating a field in the transaction.

5. A method of testing a target in a network by fault injection, the method comprising:

defining a transaction baseline;

using the transaction baseline in order to create a supplement transaction;

modifying at least one of an order and a structure of the supplement transaction to obtain a modified transaction with malformed grammar; and

transmitting the modified transaction to a target;

wherein the modifying step comprises:

replacing a delimiter with random ranges that cover the value of the delimiter;

wherein the modifying step comprises:

parsing out a delimiter to obtain an intermediate representation of the transaction, where a value in the transaction is replaced by a buffer function.

6. The method of claim 5 , further comprising:

after transmitting the modified transaction, receiving a feedback from the target to determine fault occurrence.

7. The method of claim 5 wherein the modifying step comprises:

providing alternative character encoding for a character in the transaction baseline.

8. The method of claim 5 wherein the modifying step comprises:

removing a field from the transaction.

9. The method of claim 5 wherein the modifying step comprises:

duplicating a field in the transaction.

10. The method of claim 5 wherein the modifying step comprises:

creating a double delimiter in the transaction.

11. The method of claim 5 wherein the modifying step comprises:

sending an unbalanced pair in the transaction.

12. The method of claim 5 wherein the modifying step comprises:

using an alternative encoding to encode a transaction field with a character that is equal in nature and different in representation.

13. The method of claim 5 wherein the modifying step comprises:

using prefixed escapes in the transaction.

14. The method of claim 5 wherein the modifying step comprises:

using value injection to alter an input field in the transaction.

15. The method of claim 5 wherein the modifying step comprises:

using ghost character encoding in the transaction.

16. The method of claim 5 wherein the modifying step comprises:

determining a value injection based on numerical ranges of the input field content.

17. The method of claim 5 wherein the modifying step comprises:

controlling the user identity which is a field indicating resource name or user identity.

18. The method of claim 5 wherein the modifying step comprises:

injecting unfiltered metacharacters to a secondary process.

19. The method of claim 5 wherein the modifying step comprises:

using extraneous meta-characters for causing misclassification.

20. A method of testing a target in a network by fault injection, the method comprising:

defining a transaction baseline;

using the transaction baseline in order to create a supplement transaction;

modifying at least one of an order and a structure of the supplement transaction to obtain a modified transaction with malformed grammar; and

transmitting the modified transaction to a target;

wherein the modifying step comprises:

parsing out a delimiter to obtain an intermediate representation of the transaction, where a value in the transaction is replaced by a buffer function.

21. The method of claim 20 , further comprising:

after transmitting the modified transaction, receiving a feedback from the target to determine fault occurrence.

22. The method of claim 20 wherein the modifying step comprises:

providing alternative character encoding for a character in the transaction baseline.

23. The method of claim 20 wherein the modifying step comprises:

removing a field from the transaction.

24. The method of claim 20 wherein the modifying step comprises:

duplicating a field in the transaction.

25. The method of claim 20 wherein the modifying step comprises:

creating a double delimiter in the transaction.

26. The method of claim 20 wherein the modifying step comprises:

sending an unbalanced pair in the transaction.

27. The method of claim 20 wherein the modifying step comprises:

replacing a delimiter with random ranges that cover the value of the delimiter.

28. The method of claim 20 wherein the modifying step comprises:

using an alternative encoding to encode a transaction field with a character that is equal in nature and different in representation.

29. The method of claim 20 wherein the modifying step comprises:

using prefixed escapes in the transaction.

30. The method of claim 20 wherein the modifying step comprises:

using value injection to alter an input field in the transaction.

31. The method of claim 20 wherein the modifying step comprises:

using ghost character encoding in the transaction.

32. The method of claim 20 wherein the modifying step comprises:

determining a value injection based on numerical ranges of the input field content.

33. The method of claim 20 wherein the modifying step comprises:

controlling the user identity which is a field indicating resource name or user identity.

34. The method of claim 20 wherein the modifying step comprises:

injecting unfiltered metacharacters to a secondary process.

35. The method of claim 20 wherein the modifying step comprises:

using extraneous meta-characters for causing misclassification.

Assignments (8)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 30, 2017
From: LEAVY, PENNY C.; HOGLUND, MICHAEL GREGORY; GARY, JONATHAN WALTER; ELLER, RILEY DENNIS
To: CENZIC, INC.
Reel/Frame 042524/0495 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 16, 2015
From: CENZIC INC.
To: TRUSTWAVE HOLDINGS, INC.
Reel/Frame 035847/0291 →
RELEASE OF SECURITY INTEREST Recorded Mar 18, 2014
From: HUMMER WINBLAD VENTURE PARTNERS V, L.P.
To: CENZIC, INC.
Reel/Frame 032460/0230 →
RELEASE OF SECURITY INTEREST Recorded Mar 18, 2014
From: SILICON VALLEY BANK
To: CENZIC, INC.
Reel/Frame 032459/0498 →
RELEASE OF SECURITY INTEREST RECORDED AT REEL/FRAME 026221/0630 Recorded Mar 18, 2014
From: HUMMER WINBLAD VENTURE PARTNERS V, L.P.
To: CENZIC, INC.
Reel/Frame 032463/0323 →
RELEASE OF SECURITY INTEREST RECORDED AT REEL/FRAME 026221/0630 Recorded Mar 18, 2014
From: SILICON VALLEY BANK
To: CENZIC, INC.
Reel/Frame 032467/0307 →
SECURITY INTEREST Recorded Mar 17, 2014
From: CENZIC, INC.
To: WELLS FARGO CAPITAL FINANCE, LLC, AS AGENT
Reel/Frame 032450/0685 →
SECURITY AGREEMENT Recorded May 4, 2011
From: CENZIC, INC.
To: HUMMER WINBLAD VENTURE PARTNERS V, L.P.; SILICON VALLEY BANK
Reel/Frame 026221/0630 →