US 11,599,636 B1Granted

Systems and methods for managing and providing software packages which have undergone malware and/or vulnerability analysis

AssigneeAurora Security LLC

InventorTulasi N M Pilli

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present invention relates to systems and methods for providing and managing a repository of free and/or open source software (FOSS) which is free of malware and/or vulnerabilities. The invention comprises scanning FOSS with a malware scanner and adding the FOSS to an anti-malware package management system when the malware scanner indicates no malicious code and/or vulnerabilities have been detected. The anti-malware package management system is accessible by users as a trusted source to obtain FOSS which is free of malware and believed to be safe to use. The anti-malware package management system is updated over time to keep up with changing FOSS libraries and changing malware detection capabilities so that the anti-malware package management system remains a trusted source for users to obtain FOSS.

Claims21

Dependent claims

A computer implemented method for anti-malware package management, the computer implemented method comprising:

obtaining at least one software package, the at least one software package associated with at least one of free software and open source software;
performing a first malware scan on the at least one software package, the first malware scan associated with a first malware scanner and providing a first scan result;
storing the at least one software package in a first database on a first server or a second database on the first server based on the first scan result;
obtaining a download request requesting at least one software package, the download request associated with a requester, the download request requesting at least one of a software package stored in the first database, a software package stored in the second database, and a software package not stored in the first database or second database;
obtaining custom scan requirements based on presets associated with the requester;
performing, based on the custom scan requirements, a second malware scan on the at least one requested software package when the download request is associated with a software package stored in the first database or second database, the second malware scan associated with a second malware scanner and providing a second scan result;
assigning the at least one software package stored in the first database or second database to at least one of the first database and the second database based on the second scan result;
obtaining the at least one software package not stored in the first database or second database when the download request is associated with a software package not stored in the first database or second database;
performing at least one of a first malware scan and a second malware scan, based on the custom scan requirements, on the at least one requested software package not stored in the first or second database, the first malware scan associated with a first malware scanner and providing a first scan result for the at least one requested software package not stored in the first or second database, the second malware scan associated with a second malware scanner and providing a second scan result for the at least one requested software package not stored in the first or second database;
assigning the at least one software package not stored in the first database or second database to at least one of the first database and the second database based on at least one of the first and second scan result for the at least one requested software package not stored in the first or second database;
making the at least one software package available for download from the first server via an application programming interface (API) call in response to the download request;
and
providing a notification to the requester regarding at least one of the first scan result, second scan result, and a scan history associated with the requested software package.

10 more elements

A computing system for anti-malware package management, the computing system comprising:

at least one computing processor;
and
memory comprising instructions that, when executed by the at least one computing processor, enable the computing system to:
obtain at least one software package, the at least one software package associated with at least one of free software and open source software;
perform a first malware scan on the at least one software package, the first malware scan associated with a first malware scanner and providing a first scan result;
store the at least one software package in a first database on a first server or a second database on the first server based on the first scan result;
obtain a download request requesting at least one software package, the download request associated with a requester, the download request requesting at least one of a software package stored in the first database, a software package stored in the second database, and a software package not stored in the first database or second database;
obtain custom scan requirements based on presets associated with the requester;
perform, based on the custom scan requirements, a second malware scan on the at least one requested software package when the download request is associated with a software package stored in the first database or second database, the second malware scan associated with a second malware scanner and providing a second scan result;
assign the at least one software package stored in the first database or second database to at least one of the first database and the second database based on the second scan result;
obtain the at least one software package not stored in the first database or second database when the download request is associated with a software package not stored in the first database or second database;
perform at least one of a first malware scan and a second malware scan, based on the custom scan requirements, on the at least one requested software package not stored in the first or second database, the first malware scan associated with a first malware scanner and providing a first scan result for the at least one requested software package not stored in the first or second database, the second malware scan associated with a second malware scanner and providing a second scan result for the at least one requested software package not stored in the first or second database;
assign the at least one software package not stored in the first database or second database to at least one of the first database and the second database based on at least one of the first and second scan result for the at least one requested software package not stored in the first or second database;
make the at least one software package available for download from the first server via an application programming interface (API) call in response to the download request;
and
provide a notification to the requester regarding at least one of the first scan result, second scan result, and a scan history associated with the requested software package.

13 more elements

A non-transitory computer readable medium comprising instructions that when executed by a processor enable the processor to:

obtain at least one software package, the at least one software package associated with at least one of free software and open source software;
perform a first malware scan on the at least one software package, the first malware scan associated with a first malware scanner and providing a first scan result;
store the at least one software package in a first database on a first server or a second database on the first server based on the first scan result;
obtain a download request requesting at least one software package, the download request associated with a requester, the download request requesting at least one of a software package stored in the first database, a software package stored in the second database, and a software package not stored in the first database or second database;
obtain custom scan requirements based on presets associated with the requester;
perform, based on the custom scan requirements, a second malware scan on the at least one requested software package when the download request is associated with a software package stored in the first database or second database, the second malware scan associated with a second malware scanner and providing a second scan result;
assign the at least one software package stored in the first database or second database to at least one of the first database and the second database based on the second scan result;
obtain the at least one software package not stored in the first database or second database when the download request is associated with a software package not stored in the first database or second database;
perform at least one of a first malware scan and a second malware scan, based on the custom scan requirements, on the at least one requested software package not stored in the first or second database, the first malware scan associated with a first malware scanner and providing a first scan result for the at least one requested software package not stored in the first or second database, the second malware scan associated with a second malware scanner and providing a second scan result for the at least one requested software package not stored in the first or second database;
assign the at least one software package not stored in the first database or second database to at least one of the first database and the second database based on at least one of the first and second scan result for the at least one requested software package not stored in the first or second database;
make the at least one software package available for download from the first server via an application programming interface (API) call in response to the download request;
and
provide a notification to the requester regarding at least one of the first scan result, second scan result, and a scan history associated with the requested software package.

10 more elements

A computer implemented method for anti-malware package management, the computer implemented method comprising:

obtaining at least one software package, the at least one software package associated with at least one of free software and open source software;
performing a first malware scan on the at least one software package, the first malware scan associated with a first malware scanner and providing a first scan result;
storing the at least one software package in a first database on a first server or a second database on the first server based on the first scan result;
obtaining a download request requesting at least one software package, the download request associated with a requester;
obtaining custom scan requirements based on presets associated with the requester;
performing, based on the custom scan requirements, a second malware scan on the at least one requested software package, the second malware scan associated with a second malware scanner and providing a second scan result;
assigning the at least one software package to at least one of the first database and the second database based on the second scan result;
making the at least one software package available for download from the first server via an application programming interface (API) call in response to the download request;
providing a notification to the requester regarding at least one of the first scan result, second scan result, and a scan history associated with the requested software package;
obtaining at least one updated software package, the at least one updated software package comprising an update associated with at least one previously obtained software package stored in at least one of the first database and second database;
and
performing at least one of a first malware scan and a second malware scan on the at least one updated software package, the first malware scan associated with the first malware scanner and providing a first updated scan result, the second malware scan associated with the second malware scanner and providing a second updated scan result.

9 more elements

A computing system for anti-malware package management, the computing system comprising:

at least one computing processor;
and
memory comprising instructions that, when executed by the at least one computing processor, enable the computing system to:
obtain at least one software package, the at least one software package associated with at least one of free software and open source software;
perform a first malware scan on the at least one software package, the first malware scan associated with a first malware scanner and providing a first scan result;
store the at least one software package in a first database on a first server or a second database on the first server based on the first scan result;
obtain a download request requesting at least one software package, the download request associated with a requester;
obtain custom scan requirements based on presets associated with the requester;
perform, based on the custom scan requirements, a second malware scan on the at least one requested software package, the second malware scan associated with a second malware scanner and providing a second scan result;
assign the at least one software package to at least one of the first database and the second database based on the second scan result;
make the at least one software package available for download from the first server via an application programming interface (API) call in response to the download request;
provide a notification to the requester regarding at least one of the first scan result, second scan result, and a scan history associated with the requested software package;
obtain at least one updated software package, the at least one updated software package comprising an update associated with at least one previously obtained software package stored in at least one of the first database and second database;
and
perform at least one of a first malware scan and a second malware scan on the at least one updated software package, the first malware scan associated with the first malware scanner and providing a first updated scan result, the second malware scan associated with the second malware scanner and providing a second updated scan result.

12 more elements

A non-transitory computer readable medium comprising instructions that when executed by a processor enable the processor to:

obtain at least one software package, the at least one software package associated with at least one of free software and open source software;
perform a first malware scan on the at least one software package, the first malware scan associated with a first malware scanner and providing a first scan result;
store the at least one software package in a first database on a first server or a second database on the first server based on the first scan result;
obtain a download request requesting at least one software package, the download request associated with a requester;
obtain custom scan requirements based on presets associated with the requester;
perform, based on the custom scan requirements, a second malware scan on the at least one requested software package, the second malware scan associated with a second malware scanner and providing a second scan result;
assign the at least one software package to at least one of the first database and the second database based on the second scan result;
make the at least one software package available for download from the first server via an application programming interface (API) call in response to the download request;
provide a notification to the requester regarding at least one of the first scan result, second scan result, and a scan history associated with the requested software package;
obtain at least one updated software package, the at least one updated software package comprising an update associated with at least one previously obtained software package stored in at least one of the first database and second database;
and
perform at least one of a first malware scan and a second malware scan on the at least one updated software package, the first malware scan associated with the first malware scanner and providing a first updated scan result, the second malware scan associated with the second malware scanner and providing a second updated scan result.

9 more elements

Dependencies are inferred from the claim text.