Patents by Inventor Nicolas Golubovic

Nicolas Golubovic has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Detecting injection vulnerabilities of client-side templating systems
    Patent number: 11847231
    Abstract: A method for detecting an injection vulnerability of a client-side templating system includes receiving a web page, determining that the web page implements an interpreted programming language framework with client-side templating, and extracting a version of the interpreted programming language framework and an interpolation sign from the web page. The method also includes generating an attack payload for at least one injection vulnerability context of the web page based on the version of the interpreted programming language framework and the interpolation sign, instrumenting the web page to inject the attack payload into the at least one injection vulnerability context of the web page, and executing the instrumented web page.
    Type: Grant
    Filed: October 7, 2021
    Date of Patent: December 19, 2023
    Assignee: Google LLC
    Inventors: Sebastian Lekies, Nicolas Golubovic
  • Detecting Injection Vulnerabilities of Client-Side Templating Systems
    Publication number: 20230259637
    Abstract: A method for detecting an injection vulnerability of a client-side templating system includes receiving a web page, determining that the web page implements an interpreted programming language framework with client-side templating, and extracting a version of the interpreted programming language framework and an interpolation sign from the web page. The method also includes generating an attack payload for at least one injection vulnerability context of the web page based on the version of the interpreted programming language framework and the interpolation sign, instrumenting the web page to inject the attack payload into the at least one injection vulnerability context of the web page, and executing the instrumented web page.
    Type: Application
    Filed: April 19, 2023
    Publication date: August 17, 2023
    Applicant: Google LLC
    Inventors: Sebastian Lekies, Nicolas Golubovic
  • Detecting injection vulnerabilities of client-side templating systems
    Patent number: 11640471
    Abstract: A method (800) for detecting an injection vulnerability of a client-side templating system includes receiving a web page (200), determining that the web page implements an interpreted programming language framework (142) with client-side templating, and extracting a version (144) of the interpreted programming language framework and an interpolation sign (146) from the web page. The method also includes generating an attack payload (152a) for at least one injection vulnerability context (210) of the web page based on the version of the interpreted programming language framework and the interpolation sign, instrumenting the web page to inject the attack payload into the at least one injection vulnerability context of the web page, and executing the instrumented web page.
    Type: Grant
    Filed: May 4, 2018
    Date of Patent: May 2, 2023
    Assignee: Google LLC
    Inventors: Sebastian Lekies, Nicolas Golubovic
  • Detecting Injection Vulnerabilities of Client-Side Templating Systems
    Publication number: 20220030028
    Abstract: A method for detecting an injection vulnerability of a client-side templating system includes receiving a web page, determining that the web page implements an interpreted programming language framework with client-side templating, and extracting a version of the interpreted programming language framework and an interpolation sign from the web page. The method also includes generating an attack payload for at least one injection vulnerability context of the web page based on the version of the interpreted programming language framework and the interpolation sign, instrumenting the web page to inject the attack payload into the at least one injection vulnerability context of the web page, and executing the instrumented web page.
    Type: Application
    Filed: October 7, 2021
    Publication date: January 27, 2022
    Applicant: Google LLC
    Inventors: Sebastian Lekies, Nicolas Golubovic
  • Detecting Injection Vulnerabilities of Client-Side Templating Systems
    Publication number: 20210044617
    Abstract: A method (800) for detecting an injection vulnerability of a client-side templating system includes receiving a web page (200), determining that the web page implements an interpreted programming language framework (142) with client-side templating, and extracting a version (144) of the interpreted programming language framework and an interpolation sign (146) from the web page. The method also includes generating an attack payload (152a) for at least one injection vulnerability context (210) of the web page based on the version of the interpreted programming language framework and the interpolation sign, instrumenting the web page to inject the attack payload into the at least one injection vulnerability context of the web page, and executing the instrumented web page.
    Type: Application
    Filed: May 4, 2018
    Publication date: February 11, 2021
    Applicant: Google LLC
    Inventors: Sebastian Lekies, Nicolas Golubovic