SYSTEM AND METHOD FOR PREDICTIVE PROTECTION OF CLOUD-BASED APPLICATIONS AND SERVICES

原文（中国語）

Apparatus and method for predictive protection of cloud-based applications and services. For example, a web application firewall (WAF) detects vulnerabilities in the data traffic and collects relevant information including, for example, the payload type, structure, and specific vulnerability information. For certain vulnerabilities associated with views, the view document object model (DOM) and history of views may be collected. For vulnerabilities related to API calls, the corresponding the API path and history of API calls may be retrieved. The WAF includes a signature controller which decodes the payload (e.g., the JavaScript Object Notation (JSON) structure) and creates a signature of the vulnerability based on the relevant information including, but not limited to, the API path, the web application domain, and/or the URL path. The WAF distributes collected and generated vulnerability information to web browser extensions of the web application which perform mitigations such as generating notifications when a vulnerability is encountered.