Method for static security enforcement of a dsl
AssigneeOracle International Corporation
InventorsJohn Smiljanic, Shailesh Vinayaka
Life of this patent
Estimating the term…
Abstract
An example system and method for securing computer code of a dynamic Domain Specific Language (DSL) that leverages a General Purpose Language (GPL). An example method includes enhancing compile-time security enforcement functionality for computer code written using the DSL, in part by using a compiler to perform static analysis on the DSL computer code. The static analysis includes referencing a security policy defining one or more unacceptable program behaviors; and indicating when execution of the computer code would result in performance of the one or more unacceptable program behaviors based on results of the static analysis.
Claims20
A method for securing computer code, the method comprising:
- receiving the computer code, wherein the computer code is written using a dynamic Domain Specific Language (DSL) running in a General Purpose Language (GPL) computing environment;
- using a compiler to perform static analysis on the computer code, the static analysis including referencing a security policy defining one or more unacceptable program behaviors;
- and
- indicating when execution of the computer code would result in performance of the one or more unacceptable program behaviors based on results of the static analysis.
An apparatus comprising:
- a digital processor coupled to a display and to a processor-readable storage device, wherein the processor-readable storage device includes one or more instructions executable by the digital processor to perform the following acts:
- receiving the computer code, wherein the computer code is written using a dynamic Domain Specific Language (DSL) running in a General Purpose Programming Language (GPL) computing environment;
- using a compiler to perform static analysis on the computer code, the static analysis including referencing a security policy defining one or more unacceptable program behaviors;
- and
- indicating when execution of the computer code would result in performance of the one or more unacceptable program behaviors based on results of the static analysis.
A processor-readable storage device including instructions executable by a digital processor, the processor-readable storage device including one or more instructions for:
- receiving the computer code, wherein the computer code is written using a dynamic Domain Specific Language (DSL) running in a General Purpose Programming Language (GPL) computing environment;
- using a compiler to perform static analysis on the computer code, the static analysis including referencing a security policy defining one or more unacceptable program behaviors;
- and
- indicating when execution of the computer code would result in performance of the one or more unacceptable program behaviors based on results of the static analysis.
Dependencies are inferred from the claim text.