US 11,983,265 B2 · Automated integration of a source modification engine

Abstract

Systems and methods of cyber hardening software by modifying one or more assembly source files. In some embodiments, the SME tool transparently and seamlessly integrates into the build process of the assembly source files being modified. For example, upon integration of the disclosed SME tool into the application's development environment, the modifications in the final executable are transparent to the developer and can support other cyber hardening techniques. In some embodiments, the integration of the SME tool into a build can be automated. Simplifying integration, through automated means, can be beneficial for widespread adoption of SME tools in cyberhardening software applications. Automated SME build integrations, e.g., removing manual methods and techniques, can help eliminate human errors and result in faster SME integrations, in comparison to manual integrations of a SME tool.

Claims15

Dependent claims

A method of cyberhardening source code for pre-emptively protecting against future cyberattacks, comprising:

scanning a data repository of assembly source files related to a build system to search for a filename;
upon identifying an assembly source file in the data repository having the filename, parsing contents of the file;
scanning the contents of the file to search for a suffix attached to a variable in the file;
upon determining that the suffix is attached to more than one variable, identifying variables having the attached suffix;
for a first variable and a second variable included in the file, determining a first variable name of the first variable and a second variable name of the second variable;
based on dissociating a portion of the first variable name and a portion of the second variable name, identifying a first target name portion of the first variable name and a second target name portion of the second variable;
and
automatically generating a first set of build system rules and a second set of build system rules based on the first target name portion and the second target name portion.

5 more elements

A non-transitory computer-readable storage medium having stored thereon instructions for cyberhardening source code for pre-emptively protecting the source code against future cyberattacks, wherein the instructions when executed by a processor of an electronic device cause the processor to:

scan a data repository of assembly source files related to a build system to search for a filename;
upon identifying an assembly source file in the data repository having the filename, parse contents of the file;
scan the contents of the file to search for a suffix attached to a variable in the file;
upon determining that the suffix is attached to more than one variable, identify variables having the attached suffix;
for a first variable and a second variable included in the file, determine a first variable name of the first variable and a second variable name of the second variable;
based on dissociating a portion of the first variable name and a portion of the second variable name, identify a first target name portion of the first variable name and a second target name portion of the second variable;
and
automatically generate a first set of build system rules and a second set of build system rules based on the first target name portion and the second target name portion.

5 more elements

Dependencies are inferred from the claim text.

Automated integration of a source modification engine

Life of this patent

Automated integration of a source modification engine

Life of this patent

Abstract

Claims15