Abstract: An improved web crawler, associated method of crawling the Internet, and automatically detection of crawled webpage changes are provided. The method comprises obtaining a first version and a second version of the webpage; generating a first simhash of the first version of the webpage and a second simhash of the second version of the webpage; calculating, using a similarity hashing function having small output perturbations for small input perturbations, a probability that there are no differences between the first version of the webpage and the second version of the webpage; providing, to one or more researcher computers, the first version of the webpage and the second version of the webpage; based on input identifying a change in the webpage, updating a count of changes associated with the webpage; providing information about the change in the webpage in the second version of the webpage relative to the first version of the webpage as feedback to the crawler.

Abstract: An improved web crawler, associated method of crawling the Internet, and automatically detection of crawled webpage changes are provided. The method comprises obtaining a first version and a second version of the webpage; generating a first simhash of the first version of the webpage and a second simhash of the second version of the webpage; calculating, using a similarity hashing function having small output perturbations for small input perturbations, a probability that there are no differences between the first version of the webpage and the second version of the webpage; providing, to one or more researcher computers, the first version of the webpage and the second version of the webpage; based on input identifying a change in the webpage, updating a count of changes associated with the webpage; providing information about the change in the webpage in the second version of the webpage relative to the first version of the webpage as feedback to the crawler.

Abstract: A method and apparatus for patch validation via replay and remediation verification is provided.

Abstract: A method and apparatus for soft patching security vulnerabilities is provided.

Abstract: Embedded devices, such as smart phones, can execute an application for performing a set of discrete tasks. To evaluate applications for security vulnerabilities, the application is executed and monitored. Part of this process involves the time-consuming process of performing or invoking the various user interface elements included in the application. An automated interaction system automatically, without human intervention, simulates various gestures that can be performed within each view of the application. The automated interaction system further identifies unactivated elements within subviews of the views and tracks its interactions to ensure that all of the identified UI elements within each view and subview are activated.

Abstract: Embedded devices, such as smart phones, can execute an application for performing a set of discrete tasks. To evaluate applications for security vulnerabilities, a coverage monitoring system generates a directed graph of the application running on the embedded device. The directed graph is generated by logging gestures submitted by a user of the application and logging one or more actions taken by the application in response to the gesture. The gesture can include a click, a text input, or a more complex gesture. In response to the gesture, the application can change a current view, or screen, or can transition to a different view. The coverage monitoring system logs the gestures and logs a screenshot or other data about the response of the application. The logged data is used to generate the directed graph which can be accessed by application analysts and analyzed for security vulnerabilities.