Web service vulnerability metadata exchange system

• US 20070169199A1
• Filed: 09/11/2006
• Published: 07/19/2007
• Est. Priority Date: 09/09/2005
• Status: Abandoned Application

• Current Assignee: Forum Systems, Inc. (Crosscheck Networks, Inc.)
• Original Assignee: Forum Systems, Inc. (Crosscheck Networks, Inc.)
• Inventors: Rudy, Jeffrey, Smith, Keith, Ladner, Michael, Carlsen, Mitchel, Walasek, Arthur, Quinnell, John
• Application Number:
  US11/530,760
• Publication Number:
  US 20070169199A1
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

A web service vulnerability metadata exchange system that provides for verification of web services during development by testing for the latest vulnerabilities based on security, policy, and best practice profiles prior to release of the web services, and wherein the web service vulnerability metadata exchange system will automate the surveillance of deployed web services so that new vulnerabilities are profiled and captured for use in verifying new software releases, wherein the system includes a metadata registry coupled to a database including vulnerability metadata, an update manager for updating the database records, and an access manager for authenticating and/or authorizing access to the database records.

Claims

1. A web service vulnerability metadata exchange system that provides for verification of web services during development by testing for the latest vulnerabilities based on security, policy, and best practice profiles prior to release of the web services, and wherein the web service vulnerability metadata exchange system will automate the surveillance of deployed web services so that new vulnerabilities are profiled and captured for use in verifying new software releases, wherein the system includes a metadata registry coupled to a database including vulnerability metadata, an update manager for updating the database records, and an access manager for authenticating and/or authorizing access to the database records.