SELECTIVE WEBSITE VULNERABILITY AND INFECTION TESTING

• US 20120036580A1
• Filed: 07/19/2011
• Published: 02/09/2012
• Est. Priority Date: 07/19/2010
• Status: Active Grant

• Current Assignee: SiteLock LLC
• Original Assignee: SiteLock LLC
• Inventors: Ravichandran, Hari, Gorny, Thomas, Conrad, Tracy
• Granted Patent: US 9,246,932 B2
• Time in Patent Office: Days
• US Class Current: 726/25
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

In embodiments of the present invention improved capabilities are described for selective website vulnerability and infection testing and intelligently paced rigorous direct website testing. By providing robust website content integrity checking while only lightly loading the website hosting server, visitor bandwidth availability is maintained through selective testing and intelligently paced external website exercising. A modular pod-based computing architecture of interconnected severs configured with a sharded database facilitates selective website testing and intelligent direct website test pacing while providing scalability to support large numbers of website testing subscribers.

Claims

1-32. -32. (canceled)

33. A method, comprising:

determining with a processor a status of prior infection of at least one website page; and

configuring a schedule of pacing of direct website page testing of a website containing the at least one website page based on the status of prior infection.

34. A method, comprising:

accessing hosting configuration information of a website with a processor; and

configuring a schedule of pacing of direct website page testing based on the hosting configuration information.

35. The method of claim 34, wherein the website hosting configuration information indicates that the website is hosted by a shared hosting provider.

36. A method, comprising:

accessing website security testing subscriber information with a processor, wherein the subscriber information facilitates identifying a signup channel of the subscriber; and

configuring a schedule of pacing of direct website page testing based on the signup channel.

49. The method of claim 36, wherein the subscriber information facilitates configuring the schedule of pacing of direct website page testing based on a maximum permissible number of website pages allowed for testing.

50. The method of claim 36, wherein at least a portion of the website pages are hosted by a shared hosting provider.

51. The method of claim 36, wherein at least a portion of the website pages are commonly hosted with a second website.

52. The method of claim 36, wherein the signup channel is one of a shared hosting partner and an organic signup.

37-48. -48. (canceled)