External api vulnerability assessments
AssigneeCisco Technology, Inc.
InventorsThomas Szigeti, Shannon K. MCFARLAND, Walter Theodore HULICK, JR., David John ZACKS
Life of this patent
Estimating the term…
Abstract
In one embodiment, external API vulnerability assessments may include detecting, by a process, usage of an external application programming interface in execution of an application; transmitting, by the process, a query to the external application programming interface for a list of one or more components of the external application programming interface; generating, by the process, a vulnerability assessment for the application based on a response to the query; and performing, by the process, one or more mitigation actions based on the vulnerability assessment.
Claims20
A method, comprising:
- detecting, by a process, usage of an external application programming interface in execution of an application;
- transmitting, by the process, a query to the external application programming interface for a list of one or more components of the external application programming interface;
- generating, by the process, a vulnerability assessment for the application based on a response to the query;
- and
- performing, by the process, one or more mitigation actions based on the vulnerability assessment.
A tangible, non-transitory, computer-readable medium having computer-executable instructions stored thereon that, when executed by a processor on a computer, cause the computer to perform a method comprising:
- detecting usage of an external application programming interface in execution of an application;
- transmitting a query to the external application programming interface for a list of one or more components of the external application programming interface;
- generating a vulnerability assessment for the application based on a response to the query;
- and
- performing one or more mitigation actions based on the vulnerability assessment.
An apparatus, comprising:
- one or more network interfaces to communicate with a network;
- a processor coupled to the one or more network interfaces and configured to execute one or more processes;
- and
- a memory configured to store a process that is executable by the processor, the process, when executed, configured to:
- detect usage of an external application programming interface in execution of an application;
- transmit a query to the external application programming interface for a list of one or more components of the external application programming interface;
- generate a vulnerability assessment for the application based on a response to the query;
- and
- perform one or more mitigation actions based on the vulnerability assessment.
Dependencies are inferred from the claim text.