System and method for performing automated security reviews
AssigneeCheckpoint Software Technologies Ltd.
InventorIlan Uriel
Life of this patent
Estimating the term…
Abstract
An automated method executed by circuitry is provided for monitoring a software platform including multiple pods that manage, deploy, and execute micro services. The method uses monitoring pods at locations of interest in the software platform to label transactions that pass through the monitoring pods. The labels applied to the transactions are sent to a security program for review.
Claims20
A method executed by circuitry for monitoring a software platform including multiple pods that manage, deploy, and execute micro services, the method comprising:
- identifying using the circuitry at least one pod of interest of the software platform;
- generating at least one monitoring pod;
- for each of the at least one pod of interest, positioning one of the at least one monitoring pod in association with the pod of interest using the circuitry, such that:
- transactions received by the pod of interest are first received by the monitoring pod;
- and/or
- transactions sent by the pod of interest to a peer pod are first received by the monitoring pod before reaching the peer pod;
- identifying using the circuitry at least one sending pod from the at least one monitoring pod, wherein the sending pod is configured to communicate with a security program executed by a processor;
- and
- for each transaction received by a monitoring pod:
- determining if the received transaction includes a unique identifier;
- when the received transaction does not include a unique identifier, adding a unique identifier to identifying information attached to the received transaction;
- adding a defined characteristic for the monitoring pod to the identifying information of the transaction;
- and
- when the monitoring pod is one of the at least one sending pods, sending the identifying information of the transaction to the security program.
An electronic device for monitoring a software platform including multiple pods that manage, deploy, and execute micro services, the electronic device comprising:
- circuitry configured to:
- identify at least one pod of interest of the software platform;
- generate at least one monitoring pod;
- identify at least one sending pod from the at least one monitoring pod;
- and
- for each of the at least one pod of interest, position one of the at least one monitoring pod in association with the pod of interest using the circuitry, such that:
- transactions received by the pod of interest are first received by the monitoring pod and/or transactions sent by the pod of interest to a peer pod are first received by the monitoring pod before reaching the peer pod;
- for each transaction received by a monitoring pod:
- determining with the monitoring pod if the received transaction includes a unique identifier;
- when the received transaction does not include a unique identifier, adding a unique identifier with the monitoring pod to identifying information attached to the received transaction;
- and
- adding with the monitoring pod a defined characteristic for the monitoring pod to the identifying information of the transaction;
- and
- when the monitoring pod is one of the at least one sending pods, sending with the monitoring pod the identifying information of the transaction to a security program.
Dependencies are inferred from the claim text.