Enforcing Application Security Requirement Rules Using Security Annotations
AssigneeSap SE
InventorsHendrik C.R. Lock, Iouri Loukachev
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided for enforcing security requirement rules of an application. A security guard retrieves security annotations associated with an application from a server. Each security annotation is mapped to a security requirement rule. Based on the evaluated application compliance with the security requirement rules, an executable interpretation of the corresponding security requirement rule is implemented.
Claims20
A computer-implemented method for enforcing security requirement rules of an application being implemented by one or more data processors forming part of at least one computing device, the method comprising:
- retrieving, by a security guard, a plurality of security annotations associated with the application from a server;
- mapping, by the security guard, each security annotation into a security requirement rule;
- evaluating, by the security guard, compliance of the application with the plurality of security requirement rules;
- and
- implementing, based on the evaluated compliance, one or more security implications, wherein each security implication is an executable interpretation of the corresponding security requirement rule.
A system for enforcing security requirement rules of an application, the system comprising:
- at least one data processor;
- an in-memory database;
- and
- memory storing instructions stored in the in-memory database, which when executed by at least one data processor, result in operations comprising:
- retrieving, by a security guard, a plurality of security annotations associated with the application from a server;
- mapping, by the security guard, each security annotation into a security requirement rule;
- evaluating, by the security guard, compliance of the application with the plurality of security requirement rules;
- and
- implementing, based on the evaluated compliance, one or more security implications, wherein each security implication is an executable interpretation of the corresponding security requirement rule.
A non-transitory computer readable medium containing program instructions, which when executed by at least one data processor, result in operations comprising:
- retrieving, by the security guard, a plurality of security annotations associated with the application from a server;
- mapping, by the security guard, each security annotation into a security requirement rule;
- evaluating, by the security guard, compliance of the application with the plurality of security requirement rules;
- and
- implementing, based on the evaluated compliance, one or more security implications, wherein each security implication is an executable interpretation of the corresponding security requirement rule.
Dependencies are inferred from the claim text.