Back to results
US 11,442,701 B2Granted
Filtering security controls
AssigneeEMC IP Holding Company LLC
InventorsDanny V. Dhillon, Greg W. Lazar
Life of this patent
Estimating the term…
Abstract
Methods, apparatus, and processor-readable storage media for filtering security controls are provided herein. An example computer-implemented method includes obtaining information pertaining to a software project and a target market of the software project; and identifying, based on the obtained information, at least one security control to be implemented in the software project, from among a plurality of security controls, in order to satisfy at least a threshold level of security defined for the software project, wherein the threshold level of security is based at least in part on one or more security standards related to the target market.
Claims20
A computer-implemented method comprising:
- maintaining (a) a database comprising mappings between (i) a plurality of security controls and (ii) security requirements related to a plurality of security standards, and (b) a plurality of verification methods for at least a given one of the security controls, wherein each respective one of the verification methods verifies whether the given security control satisfies a corresponding one of a plurality of security levels, wherein said maintaining is based at least in a part on a software script that evaluates text of the plurality of security standards to identify overlapping sections;
- obtaining information pertaining to a software project and a target market of the software project, wherein the information comprises a diagram comprising a plurality of elements of the software project, wherein the plurality of elements comprises:
- (i) one or more processes, (ii) one or more storage data locations, and (iii) one or more dataflows between at least some of the plurality of elements of the software project;
- identifying, based at least in part on the diagram, one or more of the security controls in the database to be implemented in the software project in order to satisfy at least a threshold level of security defined for the software project, wherein the threshold level of security corresponds to one of the plurality of security levels and is based at least in part on one or more of the plurality of security standards related to the target market;
- generating a modified diagram of the software project that visually indicates at least one of the identified security controls with respect to at least one of the plurality of elements;
- automatically implementing at least one of the identified security controls in the software project;
- and
- providing the modified diagram and at least one of a plurality of verification methods maintained in the database for the implemented at least one security control that corresponds to the threshold level of security defined for the software project to verify whether the implemented at least one security control satisfies at least the threshold level security level;
- wherein the method is performed by at least one processing device comprising a processor coupled to a memory.
6 more elements
A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device:
- to maintain a database comprising (a) mappings between (i) a plurality of security controls and (ii) security requirements related to a plurality of security standards, and (b) a plurality of verification methods for at least a given one of the security controls, wherein each respective one of the verification methods verifies whether the given security control satisfies a corresponding one of a plurality of security levels, wherein said maintaining is based at least in a part on a software script that evaluates text of the plurality of security standards to identify overlapping sections;
- to obtain information pertaining to a software project and a target market of the software project, wherein the information comprises a diagram comprising a plurality of elements of the software project, wherein the plurality of elements comprises:
- (i) one or more processes, (ii) one or more storage data locations, and (iii) one or more dataflows between at least some of the plurality of elements of the software project;
- to identify, based at least in part on the diagram, one or more of the security controls in the database to be implemented in the software project in order to satisfy at least a threshold level of security defined for the software project, wherein the threshold level of security corresponds to one of the plurality of security levels and is based at least in part on one or more of the plurality of security standards related to the target market;
- to generate a modified diagram of the software project that visually indicates at least one of the identified security controls with respect to at least one of the plurality of elements;
- to automatically implement at least one of the identified security controls in the software project;
- and
- to provide the modified diagram and at least one of a plurality of verification methods maintained in the database for the implemented at least one security control that corresponds to the threshold level of security defined for the software project to verify whether the implemented at least one security control satisfies at least the threshold level security level.
5 more elements
An apparatus comprising:
- at least one processing device comprising a processor coupled to a memory;
- the at least one processing device being configured:
- to maintain (a) a database comprising:
- mappings between (i) a plurality of security controls and (ii) security requirements related to a plurality of security standards, and (b) a plurality of verification methods for at least a given one of the security controls, wherein each respective one of the verification methods verifies whether the given security control satisfies a corresponding one of a plurality of security levels, wherein said maintaining is based at least in a part on a software script that evaluates text of the plurality of security standards to identify overlapping sections;
- to obtain information pertaining to a software project and a target market of the software project, wherein the information comprises a diagram comprising a plurality of elements of the software project, wherein the plurality of elements comprises:
- (i) one or more processes, (ii) one or more storage data locations, and (iii) one or more dataflows between at least some of the plurality of elements of the software project;
- to identify, based at least in part on the obtained information, one or more of the security controls in the database to be implemented in the software project in order to satisfy at least a threshold level of security defined for the software project, wherein the threshold level of security corresponds to one of the plurality of security levels and is based at least in part on one or more of the plurality of security standards related to the target market;
- to generate a modified diagram of the software project that visually indicates at least one of the identified security controls with respect to at least one of the plurality of elements;
- to automatically implement at least one of the identified security controls in the software project;
- and
- to provide the modified diagram and at least one of a plurality of verification methods maintained in the database for the implemented at least one security control that corresponds to the threshold level of security defined for the software project to verify whether the implemented at least one security control satisfies at least the threshold level security level.
8 more elements
Dependencies are inferred from the claim text.