Back to results
US 11,895,142 B2Granted
Computer-based platforms configured for automated early-stage application security monitoring and methods of use thereof
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorsAsish Soudhamma, Dilip Kumar, Pratik Rajendraprasad Kasat, Andrew Michael Zammit, Gregory Huff
Life of this patent
Estimating the term…
Abstract
The systems and methods disclosed herein comprise computer-based platforms configured for automated early-stage application security monitoring for allowing users (e.g., application developers) to make decisions at the early stage of the application development.
Claims20
A method, comprising:
- identifying application source code that has been committed to a repository;
- scanning one or more functions of the application source code to identify a data file retrieved by the one or more functions, wherein the application source code implements the data file when executing the one or more functions;
- retrieving metadata corresponding to the data file;
- determining that the metadata indicates that the data file has been designated as sensitive data;
- in response to the determining, generating a security vulnerability alert on a graphical user interface (GUI) dashboard;
- scanning the one or more functions of the application source code to determine a number of automated data pull requests;
- and
- automatically implementing a fix for the security vulnerability based on the automated data pull requests.
5 more elements
A system, comprising:
- a memory;
- and
- at least one processor coupled to the memory and configured to:
- identify application source code that has been committed to a repository on the memory;
- scan one or more functions of the application source code to identify a data file retrieved by the one or more functions, wherein the application source code implements the data file when executing the one or more functions;
- retrieve metadata corresponding to the data file;
- determine that the metadata indicates that the data file has been designated as sensitive data;
- in response to the determining, generate a security vulnerability alert on a graphical user interface (GUI) dashboard
- scan the one or more functions of the application source code to determine a number of automated data pull requests;
- and
- automatically implement a fix for the security vulnerability based on the automated data pull requests.
8 more elements
A non-transitory computer-readable medium having instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to perform operations comprising:
- identifying application source code that has been committed to a repository;
- scanning one or more functions of the application source code to identify a data file retrieved by the one or more functions, wherein the application source code implements the data file when executing the one or more functions;
- retrieving metadata corresponding to the data file;
- determining that the metadata indicates that the data file has been designated as sensitive data;
- in response to the determining, generating a security vulnerability alert on a graphical user interface (GUI) dashboard;
- scanning the one or more functions of the application source code to determine a number of automated data pull requests;
- and
- automatically implementing a fix for the security vulnerability based on the automated data pull requests.
5 more elements
Dependencies are inferred from the claim text.