Techniques for api endpoint detection
AssigneeWiz, Inc.
InventorsOr TZABARY, Ido YARIV, Cfir COHEN
Life of this patent
Estimating the term…
Abstract
A system and method for verification of Application Programming Interface (API) endpoints in a cloud computing environment is presented. The method includes receiving a plurality of API endpoints detected in a cloud computing environment; generating a network access instruction based on at least an API endpoint of the plurality of API endpoints; executing the network access instruction on a network path including at least an external network, wherein the external network is external to the cloud computing environment; and determining that the API endpoint is an exposed API endpoint in response to receiving a predetermined result of executing the network access instruction.
Claims21
A method for verification of Application Programming Interface (API) endpoints in a cloud computing environment, comprising:
- receiving runtime data detected by a sensor deployed on a resource in a cloud computing environment;
- detecting, based on the received runtime data, a plurality of API endpoints,
- inspecting the resource associated with an API path to detect an API endpoint of the plurality of API endpoints, associated with the API path;
- generating a network access instruction based on the detected API endpoint;
- executing the network access instruction on a network path including at least an external network, wherein the external network is external to the cloud computing environment to obtain a response generated by the resource;
- and
- determining that the API endpoint is an exposed API endpoint based on the response generated by the resource in response to executing the network access instruction.
A non-transitory computer-readable medium storing a set of instructions for verification of Application Programming Interface (API) endpoints in a cloud computing environment, the set of instructions comprising:
- one or more instructions that, when executed by one or more processors of a device, cause the device to:
- receive runtime data detected by a sensor deployed on a resource in a cloud computing environment;
- detect, based on the received runtime data, a plurality of API endpoints;
- inspect the resource associated with an API path to detect an API endpoint of the plurality of API endpoints, associated with the API path;
- generate a network access instruction based on the detected API endpoint;
- execute the network access instruction on a network path including at least an external network, wherein the external network is external to the cloud computing environment, to obtain a response generated by the resource;
- and
- determine that the API endpoint is an exposed API endpoint based on the response generated by the resource in response to executing the network access instruction.
A system for verification of Application Programming Interface (API) endpoints in a cloud computing environment comprising:
- a processing circuitry;
- a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
- receive runtime data detected by a sensor deployed on a resource in a cloud computing environment;
- detect, based on the received runtime data, a plurality of API endpoints;
- inspect the resource associated with an API path to detect an API endpoint of the plurality of API endpoints, associated with the API path;
- generate a network access instruction based on the detected API endpoint;
- execute the network access instruction on a network path including at least an external network, wherein the external network is external to the cloud computing environment, to obtain a response generated by the resource;
- and
- determine that the API endpoint is an exposed API endpoint based on the response generated by the resource in response to executing the network access instruction.
Dependencies are inferred from the claim text.