US 11,443,046 B2Granted

Entry point finder

AssigneeOnapsis Inc.

InventorsSergio Javier Abraham, Pablo Agustin Artuso, Alejandro Gabriel Burzyn

Life of this patent

Estimating the term…

Loading patent…

Abstract

A computer-based method of analyzing a business-critical application computer system includes extracting a plurality of software objects from the business-critical application computer system, storing the extracted software objects in a computer-based search platform, finding relationships between the extracted software objects that are stored in the computer-based search platform, and creating a database that represents the extracted software objects and the relationships between the extracted software objects. Each software object (a unique piece of code, a file, a data string, or other aspect of the business-critical application computer system) may represent an element of the business-critical application computer system whose graphical representation as a node connected to another node based on relationships, functional or otherwise, between the corresponding elements is desirable in view of a particular goal of the analysis.

Claims18

Dependent claims

A computer-based method of analyzing a business-critical application computer system to find relationships among software objects associated with the business-critical application computer system, the method comprising:

extracting a plurality of software objects from the business-critical application computer system;
storing the extracted software objects in a computer-based search platform;
finding relationships between the extracted software objects that are stored in the computer-based search platform;
creating a database that represents the extracted software objects and the relationships between the extracted software objects;
producing a graphical user interface for the created database that displays each respective of the extracted software objects as a single node and displays one or more of the relationships as one or more connectors between the nodes that correspond to the related software objects;
identifying a plurality of entry points based on the database or the graphical user interface, wherein each of the entry points comprises one of the extracted software objects or one of the relationships that can be accessed by an end user, wherein the extracted software objects and the relationships that cannot be accessed by the end user are not identified as an entry point;
receiving, from the end user, a specified period of time for the analyzing that is prompted in the graphical user interface for selection by the end user;
receiving end user activities over the specified period of time, wherein the identifying of the entry points is over the specified period of time;
cross-referencing the end user activities against the identified entry points to further identify any of the entry points being modified and being used as part of the end user activities during the specified period of time;
and
determining vulnerabilities based on the cross-referencing, wherein the determined vulnerabilities are the identified entry points being modified and being used as part of the end user activities during the specified period of time.

8 more elements

An entry point finder (EPF) comprising:

a plurality of worker modules;
a plurality of queues, wherein each one of the queues is communicatively coupled to a corresponding one or more of the worker modules;
a plurality of computer-based memory storage locations, wherein each one of the computer-based memory storage locations is communicatively coupled to a corresponding one or more of the worker modules;
and
a computer-based search platform communicatively coupled to at least one of the worker modules, wherein the entry point finder is configured to:
extract, with execution of one or more of the worker modules, a plurality of software objects from a business-critical application computer system;
store the extracted software objects in the computer-based search platform;
find relationships, with execution of one or more of the worker modules, between the extracted software objects that are stored in the computer-based search platform;
create a database that represents the extracted software objects and the relationships between the extracted software objects;
and
identify an entry point that is at least one of the extracted software objects or at least one of the relationships which an end user can execute;
receive, from the end user through a graphical user interface, a specified period of time for analyzing;
extract end user activities executed by the identified entry point over the specified period of time, wherein the identifying of the entry point is over the specified period of time;
cross-referencing the end user activities against the identified entry point to further identify any entry point being modified and being used as part of the end user activities during the specified period of time;
and
determine vulnerabilities based on the cross-referencing, wherein the determined vulnerabilities are any of the identified entry point being modified and being used as part of the end user activity during the specified period of time.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/676,044Filed 14 Aug 2017
Published: US 2019/0050579 A114 Feb 2019
Granted: 13 Sep 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/60
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity: protecting data
G06F 16/23
Of structured data, e.g. relational data: updating
G06F 16/33
Of unstructured textual data: querying
G06F 16/34
Of unstructured textual data: browsing; Visualisation therefor

Family

US 2019/0050579 A1Pre-grant publication · published 14 Feb 2019
US 11,443,046 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key