Reverse engineering access control
AssigneeSap SE
InventorsMaarten Rits, Benjamin De Boe
Life of this patent
Estimating the term…
Abstract
Systems and methods for reverse engineering access control include determining a set of potential access control target methods, functions and/or subroutines that may be used in software applications. A software application is then analyzed to determine if the access control targets are present in the software application. If an access control target is used by the software application, then the access control policy for the target is analyzed to determine the roles, privileges, or rights that are necessary to successfully execute the access control target. A report is then generated that provides information about the access control policy elements actually used by the software application.
Claims27
A computer-implemented method comprising:
- determining a set of access control targets;
- analyzing at least one software application to determine the presence of at least one access control target in the set of access control targets in the at least one software application;
- reading an access control policy for the at least one of the set of access control targets present in the software application;
- analyzing the access control policy for the at least access control target present in the software application to determine a set of access control parameters to allow execution of the access control target;
- and
- reporting the access control parameters.
A computer-readable medium having computer executable instructions for performing a method, the method comprising:
- determining a set of access control targets;
- analyzing at least one software application to determine the presence of at least one access control target in the set of access control targets in the at least one software application;
- reading an access control policy for the at least one access control target present in the software application;
- analyzing the access control policy for the at least one access control target present in the software application to determine a set of access control parameters to allow execution of the access control target;
- and
- reporting the access control parameters.
A computerized system comprising:
- an access control policy analysis engine;
- and
- a code weaving component to:
- read a set of access control targets,
- analyze at least one software application to determine the presence of at least one of the set of access control targets in the at least one software application;, and
- insert a call to the access control policy engine into the at least one software application;
- wherein the access control policy analysis engine is further operable to:
- read at least one access control policy, the access control policy having an access control policy type,
- analyzing the access control policy to determine one or more access control parameters to allow execution of the at least one the access control targets in the at least one software application;
- and
- report the one or more access control parameters.
Dependencies are inferred from the claim text.