SYSTEMS AND METHODS FOR DETERMINING COMPLIANCE OF REFERENCES IN A WEBSITE

• US 20110314152A1
• Filed: 06/21/2010
• Published: 12/22/2011
• Est. Priority Date: 06/21/2010
• Status: Active Grant

• Current Assignee: Rapid7 (Rapid7, Inc.)
• Original Assignee: Rapid7 (Rapid7, Inc.)
• Inventors: LODER, Chad
• Granted Patent: US 9,251,282 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links

Abstract

Systems and methods of determining compliance of content in a website or web application are disclosed. The systems and methods comprise a compliance tool to retrieve data associated with website or web application content. The compliance tool can scan the data to determine references to network locations. The compliance tool can compare the references to one or more approval rules to determine whether the references comply with the approval rules. A report can be compiled and outputted that indicates which references comply and which references do not comply with the approval rules. A user can have the option to add non-complying references to an approved list. The compliance tool can further remove non-complying references from the website or web application data and/or register non-complying references with a firewall.

Claims

1. A method of determining compliance of content in a website or web application, the method comprising:

identifying, by a processor, a reference to a network location contained in a website or web application;

determining whether the reference to the network location complies with one or more approval rules; and

providing a report identifying whether the reference complies with the one or more approval rules.

2. The method of claim 1, wherein the one or more approval rules comprise a compliance with valid domains, a compliance with valid universal resource locators (URLs), compliance with valid JavaScript links, compliance with valid URL patterns, compliance with valid file extensions, compliance with valid file types, or possession of signed security keys from an approved certificate authority.

3. The method of claim 1, wherein providing the report comprises displaying the report in a graphical user interface (GUI).

4. The method of claim 1, wherein the report comprises an indication of a severity of the reference.

5. The method of claim 1, further comprising:

receiving a request to add the reference to the network location to an approved list associated with the one or more approval rules; and

adding the reference to the network location to the approved list.

6. The method of claim 1, further comprising removing the reference to the network location from the website or web application if the reference to the network location does not comply with the one or more approval rules.

7. The method of claim 1, wherein the one or more approval rules are based on a hierarchical structure within an entity.

8. The method of claim 1, wherein the one or more approval rules vary based on a type of the reference to the network location.

9. The method of claim 1, further comprising publishing the website or web application if the reference to the network location complies with the one or more approval rules.

10. The method of claim 1, wherein identifying, by the processor, the reference to the network location comprises traversing the website or web application, analyzing source code of the website or web application, or analyzing compiled binary code or bytecode of the website or web application.

11. The method of claim 1, wherein determining whether the reference to the network location complies with the one or more approval rules, comprises:

retrieving content associated with the reference; and

validating the content to determine whether the reference to the network location complies with the one or more approval rules.

12. A computer readable storage medium embodying instructions for causing a processor to perform the method comprising:

identifying a reference to a network location contained in a website or web application;

determining whether the reference to the network location complies with one or more approval rules; and

providing a report identifying whether the reference complies with the one or more approval rules.

13. The computer readable storage medium of claim 12, wherein the one or more approval rules comprise a compliance with valid domains, a compliance with valid universal resource locators (URLs), compliance with valid JavaScript links, compliance with valid URL patterns, compliance with valid file extensions, compliance with valid file types, or possession of signed security keys from an approved certificate authority.

14. The computer readable storage medium of claim 12, wherein providing the report comprises displaying the report in a graphical user interface (GUI).

15. The computer readable storage medium of claim 12, wherein the report comprises an indication of a severity of the reference.

16. The computer readable storage medium of claim 12, the method further comprising:

receiving a request to add the reference to the network location to an approved list associated with the one or more approval rules; and

adding the reference to the network location to the approved list.

17. The computer readable storage medium of claim 12, the method further comprising:

removing the reference to the network location from the website or web application if the reference to the network location does not comply with the one or more approval rules.

18. The computer readable storage medium of claim 12, wherein the one or more approval rules vary based on a type of the reference to the network location.

19. The computer readable storage medium of claim 12, the method further comprising publishing the website or web application if the reference to the network location complies with the one or more approval rules.

20. The computer readable storage medium of claim 12, wherein identifying the reference to the network location comprises traversing the website or web application, analyzing source code of the website or web application, or analyzing compiled binary code or bytecode of the website or web application.

21. The computer readable storage medium of claim 12, wherein determining whether the reference to the network location complies with the one or more approval rules, comprises:

retrieving content associated with the reference; and

validating the content to determine whether the reference to the network location complies with the one or more approval rules.

22. A system for determining compliance of content in a website or web application, comprising:

a processor; and

a computer readable storage medium coupled to the processor and comprising instructions for causing the processor to perform the method comprising;

identifying a reference to a network location contained in a website or web application;

determining whether the reference to the network location complies with the one or more approval rules; and

providing a report identifying whether the reference complies with the one or more approval rules.

23. The system of claim 22, wherein the one or more approval rules comprise a compliance with valid domains, a compliance with valid universal resource locators (URLs), compliance with valid JavaScript links, compliance with valid URL patterns, compliance with valid file extensions, compliance with valid file types, or possession of signed security keys from an approved certificate authority.

24. The system of claim 22, wherein providing the report comprises displaying the report in a graphical user interface (GUI).

25. The system of claim 22, wherein the report comprises an indication of a severity of the reference.

26. The system of claim 22, the method further comprising:

receiving a request to add the reference to the network location to an approved list associated with the one or more approval rules; and

adding the reference to the network location to the approved list.

27. The system of claim 22, the method further comprising:

removing the reference to the network location from the website or web application if the reference to the network location does not comply with the one or more approval rules.

28. The system of claim 22, wherein the one or more approval rules vary based on a type of the reference to the network location.

29. The system of claim 22, the method further comprising publishing the website or web application if the reference to the network location complies with the one or more approval rules.

30. The system of claim 22, wherein identifying the reference to the network location comprises traversing the website or web application, analyzing source code of the website or web application, or analyzing compiled binary code or bytecode of the website or web application.

31. The system of claim 22, wherein determining whether the reference to the network location complies with the one or more approval rules, comprises:

retrieving content associated with the reference; and

validating the content to determine whether the reference to the network location complies with the one or more approval rules.