IP Library Granted Patent US 9,317,693
Granted Patent B2
US 9,317,693 · App. 14/060,516 · Granted Apr 19, 2016

Systems and methods for advanced dynamic analysis scanning

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,317,693
App. No.
14/060,516
Granted
Apr 19, 2016
Kind
B2
Abstract

The field of the invention relates to systems and methods for advanced dynamic analysis scanning for vulnerabilities using a universal translator. In an embodiment, the system includes a dynamic analysis scanner subsystem communicatively coupled to a networked computing system; the scanner subsystem is configured to crawl one or more dynamic web pages of the networked computing system, generate test data for the networked computing system, transmit the generated test data to the networked computing system, and record the networked computing system's response to the generated test data. The scanner may further comprise a universal translator configured to detect vulnerabilities and generate test data for the dynamic web pages of the networked computing system. The scanner subsystem may further comprise a smart scheduler.

Claims (10)

1. A dynamic analysis scanner subsystem communicatively coupled to a networked computing system, said dynamic analysis scanner subsystem configured to assess vulnerabilities in a networked computing system from data packets crawled and collected from

one or more dynamic web pages of the networked computing system, wherein the one or more dynamic web pages support a first web service data format;

a universal translator configured to identify the first web service data format from the collected data packets and translate the collected data packets from the first web service data format into a universal object representation;

an attack engine configured to receive the universal object representation of the data packets, modify said data packets with an attack payload, and send said data packets to the universal translator,

wherein the universal translator is further configured to generate test data for the networked computing system by translating the modified data packets with the attack payload back into the first web service data format, and

further wherein the dynamic analysis scanner subsystem is configured to:

transmit the generated test data to the networked computing system; and

record the networked computing system's response to the generated test data.

2. The dynamic analysis scanner subsystem of claim 1 , wherein the dynamic analysis scanner subsystem further comprises a smart scheduler configured to analyze how many times a data parameter was encountered in the crawled data packets and limit how many occurrences of the data parameter is included in an attack payload.

3. The dynamic analysis scanner subsystem of claim 1 , wherein the dynamic analysis scanner subsystem further provides interactive reports that contains data enabling a user to reproduce an attack and a vulnerability.

Assignments (5)
SECURITY INTEREST Recorded Jun 26, 2025
From: RAPID7, INC.; RAPID7 LLC
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 071743/0537 →
RELEASE OF SECURITY INTEREST Recorded Dec 27, 2024
From: KEYBANK NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT
To: RAPID7 LLC
Reel/Frame 069686/0652 →
INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Apr 24, 2020
From: RAPID7 LLC
To: KEYBANK NATIONAL ASSOCIATION
Reel/Frame 052487/0013 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 24, 2015
From: NT OBJECTIVES, INC.
To: RAPID7, LLC
Reel/Frame 036170/0881 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 9, 2014
From: KUYKENDALL, DAN; COHEN, MATTHEW; KASHITSYN, DMITRIY; TISDALE, ANDREW; MORTON, MICHAEL J.; ASTRAKHANTSEV, ARTEM
To: NT OBJECTIVES, INC.
Reel/Frame 031932/0900 →