David L Means

US Patent:

8010522, Aug 30, 2011

Filed:

Dec 7, 2007

Appl. No.:

11/952322

Inventors:

David Bryan Dewey - Alpharetta GA, US
David Charles Means - Woodstock GA, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 7/00

US Classification:

707714, 707724, 707754

Abstract:

System, method and program product for detecting a malicious SQL query in a parameter value field of a request. The parameter value field is searched for query operands, characters and/or symbols and combinations of query operands, characters and/or symbols indicative of malicious SQL injection. A respective score assigned to each of the query operands, characters and/or symbols or combinations of query operands, characters and/or symbols found in the parameter value field is added to yield a total score for at least two of the query operands, characters and/or symbols or combinations of query operands, characters and/or symbols found in the parameter value field. Responsive to the total score exceeding a threshold, the request is blocked.

US Patent:

20190095922, Mar 28, 2019

Filed:

Sep 28, 2017

Appl. No.:

15/719158

Inventors:

- Duluth GA, US
David Charles Means - Woodstock GA, US
Nir Veltman - Johns Creek GA, US

International Classification:

G06Q 20/40
G06Q 20/38

Abstract:

A portion of information is cryptographically hashed to obtain a hash value. The hash value is submitted as a search to shared cryptographic cooperatively shared transaction data structure and results are obtained for previous transactions associated with the information. A decision is made as to whether a pending transaction for the information is to be submitted to a host for processing or whether the pending transaction is to be denied before the information is provided to the host.