METHOD AND SYSTEM FOR RECONSTRUCTING ERROR RESPONSE MESSAGES UNDER WEB APPLICATION ENVIRONMENT

• US 20100281311A1
• Filed: 04/29/2010
• Published: 11/04/2010
• Est. Priority Date: 04/30/2009
• Status: Active Grant

• Current Assignee: Snap, Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Yang, Shun Xiang, Luo, Lin, Zhang, Yu, Gao, Bo, Guo, Chang Jie
• Granted Patent: US 8,543,869 B2
• Time in Patent Office: Days
• US Class Current: 714/49
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A computer-implemented method and system for reconstructing a response message to an improper accessing request in a web application environment. The method includes: obtaining the URL of a web application to be accessed by the improper accessing request and the error parameter information of the improper accessing request; obtaining a response template based on the obtained URL of the web application to be accessed; and merging the obtained error parameter information of the improper accessing request with the obtained response template to generate a reconstructed response message for the improper accessing request. The system includes: a message obtaining device; a response message template obtaining device; and a response message merging device.

Claims

1. A computer-implemented method for reconstructing a response message to an improper accessing request in a web application environment, the method comprising:

obtaining the URL of a web application to be accessed by said improper accessing request and the error parameter information of said improper accessing request, wherein said obtaining step is in response to receiving a response message corresponding to said improper accessing request;

obtaining a response template based on said obtained URL of said web application to be accessed; and

merging said obtained error parameter information of said improper accessing request with said obtained response template to generate a reconstructed response message for said improper accessing request.

2. The method of claim 1, further comprising receiving and modifying an original error status code of said improper accessing request, as a part of said reconstructed response message.

3. The method of claim 1, wherein said response message corresponding to said improper accessing request is a static error response message customized based on an original error status code of said improper accessing request.

4. The method of claim 3, wherein said static error response message has a specific identification.

5. The method of any of claim 1, further comprising customizing said response message template, wherein said response message template corresponds to said URL of said web application.

6. The method of claim 5, wherein said correspondence between said response message template and said URL of said web application is a one-to-one correspondence, a one-to-more correspondence, or a more-to-one correspondence.

7. A computer-implemented apparatus for reconstructing a response message to an improper accessing request in a web application environment, the apparatus comprising:

a message obtaining device for receiving said response message, and if said received response message corresponds to said improper accessing request, obtaining the URL of a web application to be accessed by said improper accessing request and the error parameter information of said improper accessing request;

a response message template obtaining device for obtaining a response template based on said obtained URL of said web application to be accessed; and

a response message merging device for merging said obtained error parameter information of said improper accessing request with said obtained response template to generate a reconstructed response message for said improper accessing request.

8. The apparatus of claim 7 further comprising a status code modification device for receiving and modifying an original error status code of said improper accessing request, as a part of said reconstructed response message.

9. The apparatus of claim 7 further comprising a static response message configuration device for customizing a static error response message based on an original error status code of said improper accessing request.

10. The apparatus of claim 9 further comprising a determination device for determining whether said response message received by said message obtaining device is said customized static error response message, and if said response message received by said message obtaining device is said customized static error response message, concluding said response message received by said message obtaining device to correspond to said improper accessing request.

11. The apparatus of claim 10, wherein said determination device is further configured to determine whether said static error response message has a specific identification, and if said static error response message has said specific identification, concluding said response message received by said message obtaining device to correspond to said improper accessing request.

12. The apparatus of claim 7 further comprising a response message template customizing device for customizing said response message template, wherein said response message template corresponds to said URL of said web application.

13. The apparatus of claim 12, wherein said correspondence between said response message template and said URL of said web application is a one-to-one correspondence, a one-to-more correspondence, or a more-to-one correspondence.

14. A computer program product for reconstructing a response message to an improper accessing request in a web application environment, said computer program product comprising computer program instructions for carrying out the steps of:

obtaining the URL of a web application to be accessed by said improper accessing request and the error parameter information of said improper accessing request, wherein said obtaining step is in response to receiving a response message corresponding to said improper accessing request;

obtaining a response template based on said obtained URL of said web application to be accessed; and

merging said obtained error parameter information of said improper accessing request with said obtained response template to generate a reconstructed response message for said improper accessing request,

wherein said computer program instructions are stored on a computer readable storage medium.

15. The computer program product according to claim 14, wherein said computer program instructions further carry out the step of receiving and modifying an original error status code of said improper accessing request, as a part of said reconstructed response message.

16. The computer program product according to claim 14, wherein said computer program instructions further carry out the step of customizing said response message template, wherein said response message template corresponds to said URL of said web application.