Secure and seamless injection of secrets based on execution debugging
AssigneeCyberArk Software Ltd.
InventorsAsaf Hecht, Emmanuel Ouanounou
Life of this patent
Estimating the term…
Abstract
Systems, methods, and apparatuses are disclosed for injecting secrets into a software instance environment. Techniques may include identifying code of an application from storage, analyzing the code to determine a secret associated with execution of the application, and monitoring the application running in one or more instances to determine a condition for the application to use the secret. Techniques may further include validating the condition for the application to use the secret based on an execution state of the application, and injecting the secret into the one or more instances, wherein the application can then access the secret and perform an operation using the secret in accordance with the determined condition.
Claims34
A computer-implemented method for injecting secrets into a software instance environment, comprising:
- identifying code of an application from storage;
- analyzing the code to determine a secret associated with execution of the application;
- monitoring the application running in one or more instances to determine a condition for the application to use the secret;
- validating the condition for the application to use the secret based on an execution state of the application;
- and
- injecting the secret into the one or more instances, wherein the application can then access the secret and perform an operation using the secret in accordance with the determined condition.
A non-transitory computer-readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for injecting secrets into a software instance environment, the operations comprising:
- identifying code of an application from storage;
- analyzing the code to determine a secret associated with execution of the application;
- monitoring the application running in one or more instances to determine a condition for the application to use the secret;
- validating the condition for the application to use the secret based on an execution state of the application;
- injecting the secret into the one or more instances, wherein the application can then access the secret and perform an operation using the secret in accordance with the determined condition.
Dependencies are inferred from the claim text.