Raymond W Kelly

US Patent:

7765597, Jul 27, 2010

Filed:

Aug 1, 2006

Appl. No.:

11/461766

Inventors:

Caleb Sima - Woodstock GA, US
Steve Millar - Dawsonville GA, US
Raymond Kelly - Loganville GA, US
Bryan Sullivan - Duluth GA, US
Gerald Sullivan - Roswell GA, US
David Tillery - Woodstock GA, US

Assignee:

Hewlett-Packard Development Company, L.P. - Houston TX

International Classification:

G06F 21/00

US Classification:

726 25, 713188, 707709

Abstract:

A vulnerability assessment tool that is operative to analyze web sites by simultaneously operating a crawling process and an audit process. Once the crawling process is invoked, the results are provided to the audit process. The audit process, rather than waiting until the crawl process is completed, simultaneously audits the web site based on the already provided crawl results. The results of the audit are also fed back to the crawl process to further enhance the crawl.

US Patent:

20060282494, Dec 14, 2006

Filed:

Aug 1, 2006

Appl. No.:

11/461767

Inventors:

Caleb Sima - Woodstock GA, US
Raymond Kelly - Loganville GA, US
Steve Millar - Dawsonville GA, US
Robert Raboud - Atlanta GA, US
Bryan Sullivan - Duluth GA, US
Jerry Sullivan - Roswell GA, US
David Tillery - Woodstock GA, US

International Classification:

H04L 9/32

US Classification:

709200000

Abstract:

A crawler that is either based on an interactive mode of operation or includes an interactive mode along with one or more other modes, such as automatic or manual. Similar to an automatic mode crawler, the crawler traverses web sites, web content and links. However, if the crawler encounters a structure that requires human interaction, such as a form, a radio button selector, a drop down selector, a human verification test, etc., the crawler pauses and prompts a user to take action.

US Patent:

20080120420, May 22, 2008

Filed:

Nov 17, 2006

Appl. No.:

11/560984

Inventors:

Caleb SIMA - Woodstock GA, US
Raymond Kelly - Loganville GA, US
William M. Hoffman - Atlanta GA, US

International Classification:

G06F 15/16

US Classification:

709229

Abstract:

The inputs of a web application are detected through a technique such as crawling, and then the characteristics of the inputs are determined. The characteristics are determined by identifying how the inputs react to various probes containing varying characters and varying numbers of characters. As such, the characters allowed by the input are identified, the maximum and minimum number of characters that are accepted and the manner in which the characters are treated by the web application. Further characteristics of the inputs are determined by examining the context of the inputs, the markup language associated with the input, the size of the input, etc. The knowledge regarding the input characterizations can be applied in a variety of settings.

US Patent:

20080120722, May 22, 2008

Filed:

Nov 17, 2006

Appl. No.:

11/560969

Inventors:

Caleb Sima - Woodstock GA, US
Raymond Kelly - Loganville GA, US
William M. Hoffman - Atlanta GA, US

International Classification:

G06F 21/00

US Classification:

726 25

Abstract:

A web application is more efficiently analyzed by intelligently generating attack sequences to be used in the assessment. Rather than simply sending a canned list of static strings at a web application, the operation of the web application is analyzed to determine the filtering and acceptance characteristics of the web site. As this information is ascertained, a vocabulary of allowed symbols is created. This vocabulary is used in the building of attack strings and as such, the number of attack strings fired at the web application is greatly reduced, as well as the number of false positives.

Address:

123 Dorado Ave, Sewell, NJ 08080

VIN:

1ZVHT85H775200486

Make:

FORD

Model:

MUSTANG

Year:

2007