Language-independent application monitoring through aspect-oriented programming

One or more non-transitory machine-readable media having program code for monitoring and analyzing execution of an application without modifying program code of the application stored thereon, the program code comprising instructions to:

• based on load of the application into a runtime engine for execution, detect a first event during execution of the application, wherein the first event corresponds to invocation of a first function of an application programming interface (API) of the runtime engine;
• determine whether the first event satisfies one of a plurality of triggers for execution of one of a corresponding plurality of code units based on at least one of a type of the first event and contextual information of the first event, wherein the contextual information comprises at least one of data and metadata of the first event;
• based on a determination that the first event satisfies one of the plurality of triggers for execution of a corresponding one of the plurality of code units, perform a first action based on execution of the corresponding code unit;
• and
• detect a first vulnerability of the application based, at least in part, on a result of performing the first action.

An apparatus comprising:

• a processor;
• and
• a machine-readable medium having instructions stored thereon that are executable by the processor to cause the apparatus to,
• analyze execution of an application loaded into a runtime engine at runtime, wherein the instructions to analyze execution of the application comprises,
• detect a first event during execution of the application based on invocation of a first function of a plurality of functions to an application programming interface (API) of the runtime engine;
• determine if the first event triggers execution of any of a plurality of code units based on evaluation of at least one of a type of the first event and contextual information obtained for the first event against a plurality of triggers that correspond to the plurality of code units;
• and
• based on a determination that the first event triggers execution of a first code unit of the plurality of code units, perform a first action based on execution of the first code unit;
• and
• detect a first vulnerability of the application based on results of analysis of execution of the application, wherein the results comprise a result of performing the first action.