Method for normalizing script program for detection of attack in computer network, involves performing series of transformations with script input, and storing transformations in database, where result of execution of script is not modified

摘要

The method (C) involves performing (C2) a series of transformations with script inputs (E0, E0-simp) at a time period, and providing a transformed script as output. The series of transformations is stored in a transformations database (1), and a result of execution of a program script is not modified. The transformation is carried out for additional number of times if the transformed script is different from the script inputs. A lexical analysis step is performed prior to performing the series of transformations. The script program is written in JavaScript(RTM: Programming language to give sophisticated functionality to web pages). Independent claims are also included for the following: (1) a computer system for normalizing a script program (2) a method for detection of attacks on a data processing network (3) a computer system for detection of attacks on a data processing network.