METHOD AND SYSTEM FOR PROTECTING WEB APPLICATIONS AGAINST WEB ATTACKS

摘要

The present disclosure provided a method and system for protecting web applications against web attacks comprising a cloud service for generating rules and receiving reports, an agent manager in communication with the cloud service receiving rules from the cloud service and passing reports thereto, and an in-application agent in communication with the agent manager for receiving rules therefrom and passing reports thereto for protecting an application in which the in-application agent is embedded.

主权项

1. A system for protecting a web application against a web attack, the system comprising:
an in-application agent for applying rules for protecting the web application in which the in-application agent is embedded and for generating reports of suspicious activity; a cloud service for providing rules, receiving the reports and generating new rules in response to the reports received without user intervention in the in-application agent; and an agent manager in communication with the cloud service for receiving the rules from the cloud service and passing the rules received to the in-application agent and for receiving the reports from the in-application agent and passing the reports received to the cloud service.