SYSTEMS AND METHODS FOR TESTING ONLINE SYSTEMS AND CONTENT

• US 20130212638A1
• Filed: 02/08/2013
• Published: 08/15/2013
• Est. Priority Date: 02/09/2012
• Status: Active Grant

• Current Assignee: Yahoo Assets LLC
• Original Assignee: AOL Inc. (Apollo Global Management, Inc.)
• Inventors: Wilson, Jeffrey Todd
• Granted Patent: US 9,521,166 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 11/3688 for test execution, e.g. scheduling of test suites
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 50/26 Government or public services business processes related to the transportation industry G06Q50/40
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Systems and methods are provided for automatically monitoring a compliance of web pages and graphical user interfaces with governmental and self-regulatory privacy and security policies. In accordance with one implementation, a method is provided that comprises instructing the execution of an operation on content associated with at least one web page is generated. The operation may include at least one of (i) a scanning operation that generates forensic data corresponding to the web page or (ii) an analytical operation that analyzes at least a portion of the forensic data corresponding to the web page. The method further comprises obtaining output data associated with the executed operation, and generating information indicative of a compliance of the web page with at least one of a privacy regulation or a security regulation, the information being generated based on the output data.

Claims

1. A computer-implemented method, comprising:

instructing, with at least one processor, the execution of an operation on content associated with at least one web page, the operation comprising at least one of (i) a scanning operation that generates forensic data corresponding to the web page or (ii) an analytical operation that analyzes at least a portion of the forensic data corresponding to the web page;

obtaining output data associated with the executed operation; and

generating, with the at least one processor, information indicating whether there is a compliance of the at least one web page with at least one of a privacy regulation or a security regulation, the information being generated based on the obtained output data.

2. The method of claim 1, further comprising:

transmitting configuration information to a server capable of executing the operation, the configuration information identifying the operation and the at least one web page.

3. The method of claim 2, further comprising:

receiving a request to execute the operation from an input source;

receiving polling information from the server, the polling information indicating an availability of the server to execute the operation; and

determining that the server is capable of executing the operation, based on the received request and the polling data.

4. The method of claim 3, wherein the transmitting comprises transmitting the configuration information to the server in response to the determination.

5. The method of claim 1, wherein the forensic data comprises at least one of a cache file, a script file, information associated with a data stream, a locally-stored object, image data, information indicative of system failure, information indicative of unexpected access or changes to an integrity of a file system, or sensitive or personal information associated with one or more users.

6. The method of claim 1, wherein:

the operation comprises the scanning operation; and

instructing the execution of the operation comprises generating an instruction to store at least a portion of the forensic data in a repository.

7. The method of claim 6, wherein:

the output data comprises confirmation of a completion of the scanning operation; and

the method further comprises generating, in response to the confirmation, a report indicative of the completion of the scanning operation.

8. The method of claim 1, wherein the analytical operation comprises at least one of an operation performed on a hyperlink within the forensic data, an operation performed on an image call within the forensic data, an operation applied to a locally-stored object within the forensic data, or an operation applied to an image of the web page within the forensic data.

9. The method of claim 1, further comprising generating a report based on at least a portion of the output data, the report comprising the information indicative of the compliance of the web page with at least one of the privacy regulation or the security regulation.

10. The method of claim 1, further comprising:

instructing the execution of the operation on content associated with a graphical user interface accessible to a user of a mobile device; and

generating, based on the output data, information indicative of a compliance of the graphical user interface with at least one of the privacy regulation or the security regulation.

11. The method of claim 1, further comprising:

generating an instruction to transmit, to an opt-out system, a request to test at least one of the opt-out system or an advertising system;

receiving a data stream sent in response to the request; and

determining an outcome of the test based on the data stream.

12. The method of claim 11, wherein the test comprises at least one of a test to determine a functionality of a website of the opt-out system, a test to determine a functionality of a web page of the website, a test to determine whether the web page includes elements enabling a user to opt-out, or a test to determine whether the opt-out system responds appropriately based on a selection of one or more of the elements.

13. The method of claim 11, further comprising receiving an opt-out cookie from the advertising system.

14. The method of claim 13, wherein determining the outcome comprises determining at least one of whether a unique identifier of the opt-out cookie is equal to a dummy value, whether a tracking value is set to a predetermined opt-out tracking value, or whether a minimum lifespan of the opt-out cookie is equal to or greater than a predetermined minimum lifespan.

15. The computer-implemented method of claim 1, further comprising generating an instruction to transmit, after receiving the opt-out cookie, an additional request to the opt-out system to test an indicator on a website of the opt-out system, wherein the indicator indicates a type of cookie corresponding to the advertising system on the test system.

16. The computer-implemented method of claim 15, further comprising:

receiving, in response to the additional request, an additional data stream comprising an image of the indicator; and

determining whether the indicator corresponds to the opt-out cookie based on a checksum or pattern match on the image.

17. A computer-implemented method, comprising:

obtaining forensic data associated with at least one web page;

performing, with at least one processor, an analytical operation on the forensic data, the analytical operation comprising at least one of an operation performed on a hyperlink within the forensic data, an operation performed on an image call within the forensic data, an operation applied to a locally-stored object within the forensic data, or an operation applied to an image of the web page, a page object, or a request within the forensic data; and

generating, with the at least one processor, output data associated with the analytical operation, the output data being indicative of a compliance of the web page with at least one of a privacy regulation or a security regulation.

18. A computer-implemented method, comprising:

performing, with at least one processor, a scanning operation on at least one web page;

obtaining, in response to the performing the scanning operation, forensic data indicative of a compliance of the web page with at least one of a privacy regulation or a security regulation; and

generating, with at least one processor, an instruction to store at least a portion of the forensic data in a repository.

19. The method of claim 18, wherein the forensic data comprises at least one of a cache file, a script file, information associated with a data stream, a locally-stored object, image data, information indicative of system failure, information indicative of unexpected changes to an integrity of a file system, or sensitive or personal information associated with one or more users.

20. An apparatus, comprising:

a storage device; and

at least one processor coupled to the storage device, wherein the storage device stores a program for controlling the at least one processor, and wherein the at least one processor, being operative with the program, is configured to;

instruct the execution of an operation on content associated with at least one web page, the operation comprising at least one of (i) a scanning operation that generates forensic data corresponding to the web page or (ii) an analytical operation that analyzes at least a portion of the forensic data corresponding to the web page;

obtain output data associated with the executed operation; and

generate information indicative of a compliance of the web page with at least one of a privacy regulation or a security regulation, the information being generated based on the output data.

21. The apparatus of claim 20, wherein the at least one processor is further configured to:

transmit configuration information associated with the generated instruction to a server capable of executing the operation, the configuration information identifying the operation and the at least one web page.

22. The apparatus of claim 21, wherein the at least one processor is further configured to:

receive a request to execute the operation from an input source;

receive polling information from the server, the polling information indicating an availability of the server to execute the operation; and

determine that the server is capable of executing the operation, based on the received request and the polling data.

23. The apparatus of claim 21, wherein the at least one processor is further configured to transmit the configuration information to the server in response to the determination.

24. The apparatus of claim 20, wherein the forensic data comprises at least one of a cache file, a script file, information associated with a data stream, a locally-stored object, image data, information indicative of system failure, information indicative of unexpected changes to an integrity of a file system, or sensitive or personal information associated with one or more users.

25. The apparatus of claim 20, wherein the analytical operation comprises at least one of an operation performed on a hyperlink within the forensic data, an operation performed on an image call within the forensic data, an operation applied to a locally-stored object within the forensic data, or an operation applied to an image of the web page within the forensic data.

26. A tangible, non-transitory computer-readable medium storing instructions that, when executed by at least one processor, perform a method comprising the steps of:

instructing the execution of an operation on content associated with at least one web page, the operation comprising at least one of (i) a scanning operation that generates forensic data corresponding to the web page or (ii) an analytical operation that analyzes at least a portion of the forensic data corresponding to the web page;

obtaining output data associated with the executed operation; and

generating information indicative of a compliance of the web page with at least one of a privacy regulation or a security regulation, the information being generated based on the output data.