JFrog. has filed a patent for a method to detect command injection attacks in computer systems. The method involves identifying suspicious inputs, flagging potential attacks, and taking remedial action before executing commands. This innovation aims to enhance cybersecurity measures in online environments. GlobalData’s report on JFrog gives a 360-degree view of the company including its patenting strategy. Buy the report here.

Access deeper industry intelligence

Experience unmatched clarity with a single platform that combines unique data, AI, and human expertise.

Find out more

According to GlobalData’s company profile on JFrog, Trusted platform module was a key innovation area identified from patents. JFrog's grant share as of January 2024 was 47%. Grant share is based on the ratio of number of grants to total number of patents.

Online detection of command injection attacks in computerized systems

Source: United States Patent and Trademark Office (USPTO). Credit: JFrog Ltd

The patent application (Publication Number: US20230376587A1) describes a method for online detection of command injection attacks in a computerized system. The method involves identifying potential input provisioning events that include a command separator and an executable product received from a network. Upon detecting such inputs, a suspicious record event is recorded. Subsequently, during potential execution events, if an execution command correlates with the suspicious record event, it is flagged as a command injection attack. Remedial actions are then taken to prevent the execution of the flagged command injection attack.

Furthermore, the method includes various additional features such as reporting the attack to a user, preventing the execution of flagged commands, and analyzing the timing correlation between input provisioning and execution events. The system utilizes string manipulation hook functions to analyze input strings and activate triggers based on predetermined conditions. By setting up triggers and periodically analyzing string generation events, the method aims to proactively detect and prevent command injection attacks. The patent also covers a computer program product and a computerized apparatus with processors adapted to perform the steps outlined in the method for detecting and mitigating command injection attacks in real-time within a computerized system.

To know more about GlobalData’s detailed insights on JFrog, buy the report here.

Data Insights

From

The gold standard of business intelligence.

Blending expert knowledge with cutting-edge technology, GlobalData’s unrivalled proprietary data will enable you to decode what’s happening in your market. You can make better informed decisions and gain a future-proof advantage over your competitors.

GlobalData

GlobalData, the leading provider of industry intelligence, provided the underlying data, research, and analysis used to produce this article.

GlobalData Patent Analytics tracks bibliographic data, legal events data, point in time patent ownerships, and backward and forward citations from global patenting offices. Textual analysis and official patent classifications are used to group patents into key thematic areas and link them to specific companies across the world’s largest industries.