# US 12,001,552 B1 · Application trust framework > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,001,552 B1 - Document ID: US12001552B1 - Status: Granted - Kind: B1 - Application number: 18/168,852 - Filed: 2023-02-14 - Granted: 2024-06-04 - Earliest claimed: 2023-02-14 - Assignees: Snowflake Inc. - Applicants: Snowflake Inc. - Inventors: Damien Carru; Pui Kei Johnston Chu; Benoit Dageville; Iulia Ion; Unmesh Jagtap; Subramanian Muralidhar; James Pan; Nihar Pasala; Hrushikesh Shrinivas Paralikar; Jake Tsuyemura; Ryan Charles Quistorff; Rishabh Gupta - Web page: https://patentgrep.com/patent/US12001552B1 ## CPC - G06F 21/565: {by checking file integrity} - G06F 8/60: Software deployment - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F 2221/033: Test or assess software - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An anti-abuse system is provided for a data-platform. An anti-abuse scanner of the data-platform detects a creation of an application package by a provider of content to the data platform where the application package includes a set of files for deployment on the data platform. The anti-abuse scanner performs a review of the set of files to detect malicious content where the review is based on a set of analysis rules and generates a deployment decision for the application package based on a result of the review. ## Claims ### Claim 1 A computer-implemented method comprising: detecting, by one or more processors, a creation of an application package on a data platform by a provider of content to the data platform, the application package comprising a set of files for deployment on the data platform for use by a consumer of data services on the data platform; adding, by the one or more processors, metadata to the application package, the metadata comprising a scan property status for each version and patch of the application package; performing, by the one or more processors, a review of the set of files based on the scan property status of the metadata, the review to detect malicious content based on a set of analysis rules; and generating, by the one or more processors, a deployment decision for the application package for deployment on the data platform based on a result of the review. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein detecting the creation of the application package comprises detecting a creation of a listing of the application package, the listing targeting a consumer of data services on the data platform. ### Claim 3 (depends on 2) The computer-implemented method of claim 2, wherein the listing is a public listing. ### Claim 4 (depends on 2) The computer-implemented method of claim 2, wherein the listing is a private listing. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, wherein the review comprises: scanning the set of files using a set of scanner tools, the set of scanner tools generating a respective verdict of a set of verdicts of whether the set of files contain malicious content. ### Claim 6 (depends on 5) The computer-implemented method of claim 5, further comprising: generating a risk score based on the set of verdicts; and determining the result of the review based on the risk score. ### Claim 7 (depends on 6) The computer-implemented method of claim 6, wherein the result of the review is determined further based on a previous result of a previous review. ### Claim 8 (depends on 6) The computer-implemented method of claim 6, wherein the result of the review comprises an automatic rejection of the deployment of the application package. ### Claim 9 (depends on 6) The computer-implemented method of claim 6, wherein the result of the review comprises an automatic approval of the deployment of the application package. ### Claim 10 (depends on 6) The computer-implemented method of claim 6, wherein the result of the review comprises triggering a manual review of the deployment of the application package. ### Claim 11 A data platform comprising: at least one processor; and at least one memory storing instructions that cause the at least one processor to perform operations comprising: detecting a creation of an application package on a data platform by a provider of content to the data platform, the application package comprising a set of files for deployment on the data platform for use by a consumer of data services on the data platform; adding metadata to the application package, the metadata comprising a scan property status for each version and patch of the application package; performing a review of the set of files based on the scan property status of the metadata, the review to detect malicious content based on a set of analysis rules; and generating a deployment decision for the application package for deployment on the data platform based on a result of the review. ### Claim 12 (depends on 11) The data platform of claim 11, wherein detecting the creation of the application package comprises detecting a creation of a listing of the application package, the listing targeting a consumer of data services on the data platform. ### Claim 13 (depends on 12) The data platform of claim 12, wherein the listing is a public listing. ### Claim 14 (depends on 12) The data platform of claim 12, wherein the listing is a private listing. ### Claim 15 (depends on 11) The data platform of claim 11, wherein the review comprises: scanning the set of files using a set of scanner tools, the set of scanner tools generating a respective verdict of a set of verdicts of whether the set of files contain malicious content. ### Claim 16 (depends on 15) The data platform of claim 15, wherein the operations further comprise: generating a risk score based on the set of verdicts; and determining the result of the review based on the risk score. ### Claim 17 (depends on 16) The data platform of claim 16, wherein the result of the review is determined further based on a previous result of a previous review. ### Claim 18 (depends on 16) The data platform of claim 16, wherein the result of the review comprises an automatic rejection of the deployment of the application package. ### Claim 19 (depends on 16) The data platform of claim 16, wherein the result of the review comprises an automatic approval of the deployment of the application package. ### Claim 20 (depends on 16) The data platform of claim 16, wherein the result of the review comprises triggering a manual review of the deployment of the application package. ### Claim 21 A computer-storage medium comprising instructions that, when executed by one or more processors of a machine, configure the machine to perform operations comprising: detecting a creation of an application package on a data platform by a provider of content to the data platform, the application package comprising a set of files for deployment on the data platform for use by a consumer of data services on the data platform; adding metadata to the application package, the metadata comprising a scan property status for each version and patch of the application package; performing a review of the set of files based on the scan property status of the metadata, the review to detect malicious content based on a set of analysis rules; and generating a deployment decision for the application package for deployment on the data platform based on a result of the review. ### Claim 22 (depends on 21) The computer-storage medium of claim 21, wherein detecting the creation of the application package comprises detecting a creation of a listing of the application package, the listing targeting a consumer of data services on the data platform. ### Claim 23 (depends on 22) The computer-storage medium of claim 22, wherein the listing is a public listing. ### Claim 24 (depends on 22) The computer-storage medium of claim 22, wherein the listing is a private listing. ### Claim 25 (depends on 21) The computer-storage medium of claim 21, wherein the review comprises: scanning the set of files using a set of scanner tools, the set of scanner tools generating a respective verdict of a set of verdicts of whether the set of files contain malicious content. ### Claim 26 (depends on 25) The computer-storage medium of claim 25, wherein the operations further comprise: generating a risk score based on the set of verdicts; and determining the result of the review based on the risk score. ### Claim 27 (depends on 26) The computer-storage medium of claim 26, wherein the result of the review is determined further based on a previous result of a previous review. ### Claim 28 (depends on 26) The computer-storage medium of claim 26, wherein the result of the review comprises an automatic rejection of the deployment of the application package. ### Claim 29 (depends on 26) The computer-storage medium of claim 26, wherein the result of the review comprises an automatic approval of deployment of the application package. ### Claim 30 (depends on 26) The computer-storage medium of claim 26, wherein the result of the review comprises triggering a manual review of the deployment of the application package.