URL Resource Type Determination via Server Response Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing URL address determination methods struggle to accurately identify whether a resource is a file or directory, especially when the URL format is partially omitted, leading to difficulties in diagnosing web application vulnerabilities.
Innovation Solution
A method and apparatus that receive a URL address, request a server response, extract a response URL address from the server data, and determine the resource type based on the server response, including checking for the presence of a slash at the end of the URL address to differentiate between file and directory resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If URL address format is used for determination, then determination speed is improved, but determination accuracy deteriorates when format is partially omitted
Solution Approach 1:
The patent introduces a server response as an intermediary element to mediate between the URL address format and the resource type determination. When the URL format is ambiguous or incomplete, the system sends a request to the target server and uses the server's response (specifically the response URL address) as additional information to accurately determine whether the resource is a file or directory, thus resolving the contradiction between fast format-based determination and accurate determination when format is incomplete
Solution Approach 2:
The patent applies partial action by selectively using different determination methods based on the completeness of the URL format. When the URL format is complete and clear, it uses only the format-based determination method for speed. When the format is partially omitted or ambiguous, it additionally performs server response verification to ensure accuracy, thus adapting the level of action to the specific situation
2Measurement precision
If server response verification is added, then determination accuracy is improved, but system complexity increases
Solution Approach 1:
The patent implements a dynamic determination system that adapts its complexity based on the input URL characteristics. The system first performs a quick format-based assessment, and only when the URL format indicates ambiguity or incompleteness does it dynamically activate the more complex server response verification process. This dynamic approach ensures high accuracy when needed while avoiding unnecessary complexity for clear-cut cases
Solution Approach 2:
The patent segments the determination process into two distinct stages: a first-stage format-based determination that is simple and fast, and a second-stage server response verification that is more complex but only activated when needed. This segmentation allows the system to maintain low complexity for routine cases while achieving high accuracy when the situation demands it
Data Source
AI summary
A URL address determining method includes receiving a URL address extracted from a target server; requesting a response corresponding to the URL address from the target server; when receiving response data from the target server, extracting a response URL address corresponding to the URL address from the response data; and determining a resource indicated by the URL address by using the response URL address.