Application security service
AssigneeTala Security, Inc.
InventorsSanjay Sawhney, Aanand Mahadevan Krishnan, Somesh Jha, Andrew Joseph Davidson, Swapnil Bhalode
Life of this patent
Estimating the term…
Abstract
Techniques to facilitate security for a software application are disclosed herein. In at least one implementation, static analysis is performed on code resources associated with the software application to generate static analysis results. Dynamic analysis is performed on a running instance of the software application to generate dynamic analysis results. An application information model of the software application is generated based on the static analysis results and the dynamic analysis results. Security policies for the software application are determined based on the application information model.
Claims20
A method of operating a computing system to facilitate security for a software application, the method comprising:
- performing static analysis on code resources associated with the software application to generate static analysis results;
- performing dynamic analysis on a running instance of the software application to generate dynamic analysis results, wherein performing the dynamic analysis comprises determining legitimate interactions between the software application and external entities at run time;
- performing dependency analysis on at least one of components, libraries, frameworks, runtime parameters, or service discovery of the software application to generate dependency analysis results;
- generating an application information model of the software application based at least on the static analysis results, the dynamic analysis results, and the dependency analysis results to define a set of security-relevant behaviors of the software application;
- and
- determining security policies for the software application based on the application information model, wherein the security policies are deployed to a security application for the software application.
One or more computer-readable storage media having program instructions stored thereon to facilitate security for a software application, wherein the program instructions, when executed by a computing system, direct the computing system to at least:
- perform static analysis on code resources associated with the software application to generate static analysis results;
- perform dynamic analysis on a running instance of the software application to generate dynamic analysis results, wherein the dynamic analysis comprises determining legitimate interactions between the software application and external entities at run time;
- perform dependency analysis on at least one of components, libraries, frameworks, runtime parameters, or service discovery of the software application to generate dependency analysis results;
- generate an application information model of the software application based at least on the static analysis results, the dynamic analysis results, and the dependency analysis results to define a set of security-relevant behaviors of the software application;
- and
- determine security policies for the software application based on the application information model, wherein the security policies are deployed to a security application for the software application.
An apparatus comprising:
- one or more computer-readable storage media;
- and
- program instructions stored on the one or more computer-readable storage media that, when executed by a processing system, direct the processing system to at least:
- perform static analysis on code resources associated with a software application to generate static analysis results;
- perform dynamic analysis on a running instance of the software application to generate dynamic analysis results, wherein the dynamic analysis comprises determining legitimate interactions between the software application and external entities at run time;
- perform dependency analysis on at least one of components, libraries, frameworks, runtime parameters, or service discovery of the software application to generate dependency analysis results;
- generate an application information model of the software application based at least on the static analysis results, the dynamic analysis results, and the dependency analysis results to define a set of security-relevant behaviors of the software application;
- and
- determine security policies for the software application based on the application information model, wherein the security policies are deployed to a security application for the software application.
Dependencies are inferred from the claim text.