SYSTEMS AND METHODS FOR INTERPRETER BASED APPLICATION CYBERSECURITY
A non-transitory computer readable medium contains instructions that when executed cause one or more processors to perform cybersecurity operations that include detecting an interpreter-based application configured to exhibit native functionality and to generate a plurality of execution contexts following receipt of an original input code. An interpreter-based cybersecurity agent is injected within the detected interpreter-based application, which is itself configured for execution by the interpreter-based application prior to execution of the original input code. Exposed APIs are patched using the injected interpreter-based cybersecurity agent to cause patched APIs to exhibit non-native functionality in order to thwart exploitations.
1 . A non-transitory computer readable medium containing instructions that when executed by at least one processor cause the at least one processor to perform cybersecurity operations comprising:
detecting at least one interpreter-based application, wherein the at least one interpreter-based application is configured to exhibit native functionality and to generate a plurality of execution contexts following receipt of an original input code;
injecting an interpreter-based cybersecurity agent within the at least one detected interpreter-based application, wherein the injected interpreter-based cybersecurity agent is configured for execution prior to execution of the original input code by the at least one interpreter-based application; and
patching exposed application programming interfaces using the injected interpreter-based cybersecurity agent, wherein the patching is configured to cause patched application programming interfaces to exhibit non-native functionality different from the native functionality, and wherein the non-native functionality differs for differing execution contexts of the at least one interpreter-based application in order to thwart exploitations.
2 . The non-transitory computer readable medium of claim 1 , wherein the injected interpreter-based cybersecurity agent is configured for execution prior to execution of the original input code with each of the plurality of execution contexts.
3 . The non-transitory computer readable medium of claim 1 , wherein the injecting occurs in each of the plurality of execution contexts before the original input code is executed by the at least one interpreter-based application.
4 . The non-transitory computer readable medium of claim 1 , wherein the operations further comprise detecting the original input code in transit, and wherein injecting occurs at a top portion of the original input code to generate a modified input code and to thereby enable the interpreter-based cybersecurity agent to be executed before the original input code is executed.
5 . The non-transitory computer readable medium of claim 4 , wherein detecting the original input code occurs via a local proxy.
6 . The non-transitory computer readable medium of claim 4 , wherein detecting the original input code occurs via a local virtual private network server.
7 . The non-transitory computer readable medium of claim 4 , wherein detecting the original input code occurs via a native application configured to monitor files associated with the at least one interpreter-based application.
8 . The non-transitory computer readable medium of claim 1 , wherein the patching is configured to cause unpredictable manipulations of at least one of the exposed application programming interfaces.
9 . The non-transitory computer readable medium of claim 1 , wherein the operations further comprise recording changes caused by the non-native functionality to thereby enable reconstruction of original functionality.
10 . A method for performing cybersecurity operations, the method comprising:
detecting at least one interpreter-based application, wherein the at least one interpreter-based application has a plurality of execution contexts and is configured to exhibit native functionality;
injecting an interpreter-based cybersecurity agent within the at least one detected interpreter-based application, wherein the injected interpreter-based cybersecurity agent is configured for execution prior to code associated with the at least one interpreter-based application; and
patching exposed application programming interfaces using the injected interpreter-based cybersecurity agent, wherein the patching is configured to cause the patched application programming interfaces to exhibit non-native functionality different from the native functionality, and wherein the non-native functionality differs for differing execution contexts of the at least one interpreter-based application in order to circumvent exploitations.
11 . The method of claim 10 , further comprising executing the injected interpreter-based cybersecurity agent prior to code associated with each of the plurality of execution contexts.
12 . The method of claim 10 , further comprising injecting the interpreter-based cybersecurity agent in each of the plurality of execution contexts before other code is executed by the at least one interpreter-based enabled application.
13 . The method of claim 10 , further comprising detecting original input code in transit, and injecting the interpreter-based cybersecurity agent at a top portion of the input code to generate a modified input code and to thereby enable the interpreter-based cybersecurity agent to be executed before the original input code is executed.
14 . The method of claim 10 , further comprising causing unpredictable manipulations of at least one of the exposed application programming interfaces via the patching.
15 . The method of claim 10 , further comprising recording changes caused by the non-native functionality to thereby enable reconstruction of the native functionality.
16 . A system for performing cybersecurity operations, comprising:
at least one processor configured to:
detect at least one interpreter-based application stored in at least one memory, wherein the at least one interpreter-based application has a plurality of execution contexts and is configured to exhibit native functionality,
inject an interpreter-based cybersecurity agent within the at least one detected interpreter-based application, wherein the injected interpreter-based cybersecurity agent is configured for execution prior to code associated with the interpreter-based application; and
patch exposed application programming interfaces using the injected interpreter-based cybersecurity agent, wherein the patching is configured to cause the patched application programming interfaces to exhibit non-native functionality different from the native functionality, and wherein the non-native functionality differs for differing execution contexts of the interpreter-based application in order to circumvent exploitations.
17 . The system of claim 16 , wherein the processor is further configured to detect original input code in transit and inject the interpreter-based cybersecurity agent at a top portion of the original input code to generate a modified input code and to thereby enable the interpreter-based cybersecurity agent to be executed before the original input code is executed.
18 . The system of claim 17 , wherein detecting the original input code occurs via at least one of: a local proxy, a local virtual private network server, a native application configured to monitor interpreter-based language files.
19 - 71 . (canceled)