Centralized security analysis and management of source code in network environments
AssigneeCyberArk Software Ltd.
InventorAsaf Hecht
Life of this patent
Estimating the term…
Abstract
Disclosed embodiments relate to systems and methods for centrally analyzing and managing source code. Techniques include identifying, at a centralized resource in a network environment, a first source code; identifying the first source code as a candidate for an execution of an access control action; identifying, at the centralized resource, a security risk indication for the first source code, the security risk indication being based on permissions associated with a functionality of the first source code; performing, based on the security risk indication, at least one of: developing a least privilege set of permissions for the source code, or modifying the least privilege set of permissions.
Claims20
A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for centrally analyzing and managing source code, the operations comprising:
- identifying, at a centralized resource in a network environment, a first source code;
- identifying the first source code as a candidate for an execution of an access control action, wherein identifying the first source code is triggered by the first source code being uploaded, pushed, or changed in the network environment;
- identifying, at the centralized resource, a security risk indication for the first source code, the security risk indication being based on a multifactor analysis of the first source code, wherein the multifactor analysis is based on at least two or more of:
- an identity requesting execution of the first source code, a source of the first source code, a permission associated with a functionality of the first source code, an embedded credential within the first source code, or an authentication status of the first source code;
- performing, based on the security risk indication, at least one of:
- developing a least privilege set of permissions for the source code,
- modifying the least privilege set of permissions,
- determining whether to execute the first source code at the centralized resource, or
- determining execution conditions for execution of the first source code at the centralized resource.
A computer-implemented method for centrally analyzing and managing scripts, the method comprising:
- identifying, at a centralized resource in a network environment, a first source code;
- identifying the first source code as a candidate for an execution of an access control action, wherein identifying the first source code is triggered by the first source code being uploaded, pushed, or changed in the network environment;
- identifying, at the centralized resource, a security risk indication for the first source code, the security risk indication being based on a multifactor analysis of the first source code, wherein the multifactor analysis is based on at least two or more of:
- an identity requesting execution of the first source code, a source of the first source code, a permission associated with a functionality of the first source code, an embedded credential within the first source code, or an authentication status of the first source code;
- performing, based on the security risk indication, at least one of:
- developing a least privilege set of permissions for the source code,
- modifying the least privilege set of permissions,
- determining whether to execute the first source code at the centralized resource, or
- determining execution conditions for execution of the first source code at the centralized resource.
Dependencies are inferred from the claim text.