Application security service
AssigneeTala Security, Inc.
InventorsSanjay Sawhney, Aanand Mahadevan Krishnan, Somesh Jha, Andrew Joseph Davidson, Swapnil Bhalode
Life of this patent
Estimating the term…
Abstract
Techniques to facilitate security for a software application are disclosed herein. In at least one implementation, static analysis is performed on code resources associated with the software application to generate static analysis results. Dynamic analysis is performed on a running instance of the software application to generate dynamic analysis results. An application information model of the software application is generated based on the static analysis results and the dynamic analysis results. Security policies for the software application are determined based on the application information model.
Claims20
A method of operating a computing system to facilitate security for a software application, the method comprising:
- performing static analysis on code resources associated with the software application to generate static analysis results;
- performing dynamic analysis on a running instance of the software application to generate dynamic analysis results;
- generating an application information model of the software application based on the static analysis results and the dynamic analysis results;
- and
- determining security policies for the software application based on the application information model.
One or more computer-readable storage media having program instructions stored thereon to facilitate security for a software application, wherein the program instructions, when executed by a computing system, direct the computing system to at least:
- perform static analysis on code resources associated with the software application to generate static analysis results;
- perform dynamic analysis on a running instance of the software application to generate dynamic analysis results;
- generate an application information model of the software application based on the static analysis results and the dynamic analysis results;
- and
- determine security policies for the software application based on the application information model.
An apparatus comprising:
- one or more computer-readable storage media;
- and
- program instructions stored on the one or more computer-readable storage media that, when executed by a processing system, direct the processing system to at least:
- perform static analysis on code resources associated with a software application to generate static analysis results;
- perform dynamic analysis on a running instance of the software application to generate dynamic analysis results;
- generate an application information model of the software application based on the static analysis results and the dynamic analysis results;
- and
- determine security policies for the software application based on the application information model.
Dependencies are inferred from the claim text.