Assessing and reporting security risks of an application program interface
AssigneeAmazon Technologies, Inc.
InventorsTodd Lawrence Cignetti, Robert Eric Fitzgerald, Eric Wayne Schultze
Life of this patent
Estimating the term…
Abstract
A security service of a computing resource service provider provides security scores for application program interfaces (APIs) and other security information to an API marketplace or other endpoints. The security score may be based at least in part on component information associated with computing resources implementing the API. The security service may obtain access to the computing resources and collect various components from the computing resources. The components may then be used to determine a security score of an API offered from consumption on the API marketplace. The security service may then publish the security score to the API marketplace or other endpoint.
Claims23
A computer-implemented method, comprising:
- detecting a trigger event indicating that a security score is to be determined for an application program interface, and wherein the application program interface is made available for consumption by a computing resource service provider;
- obtaining responses from a set of computing resources implementing the application program interface by at least invoking the application program interface;
- analyzing the responses to obtain a set of components of the security score, the set of components indicating configuration information and security information associated with the set of computing resources;
- determining the security score based at least in part on the set of components by at least comparing the set of components of the security score to a security policy maintained by the computing resource service provider;
- and
- publishing the security score to the computing resource service provider that makes the application program interface available for consumption.
A system, comprising:
- one or more processors;
- and
- memory with executable instructions that, as a result of being executed by the one or more processors, cause the system to:
- determine a security score associated with an application program interface by at least:
- detecting a trigger indicating the security score is to be determined for the application program interface;
- obtaining a set of components of the security score from a set of computing systems executing at least a portion of the application program interface, the set of components including information obtained at least in part on responses to calls to the application program interface executed by the set of computing systems;
- and
- determining the security score based at least in part on the set of components;
- and
- publish the security score to one or more endpoints.
A non-transitory computer-readable storage medium comprising executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:
- obtain a component of a security score associated with an application program interface, the application program interface available for consumption through an interface provided by at least one other computer system, the component indicating information associated with a response to an invocation of the application program interface;
- determine the security score for the application program interface based at least in part on conformation of the component to a security policy;
- and
- provide the security score to the at least one other computer system.
Dependencies are inferred from the claim text.