US 8,806,618 B2 · Security by construction for distributed applications

Abstract

Secure distributed applications are produced by default upon construction. Mechanisms are provided to address distributed application vulnerabilities (e.g., cross-site scripting, cross-site request forgery, replay attacks. . . ) automatically. These mechanisms are provided in conjunction with a tier split component that breaks up an application for execution across multiple contexts or tiers. As a result, any application that is tier split is protected from security vulnerabilities by default without any intervention on the part of a developer.

Claims20

Dependent claims

A distributed application development system, comprising:

a processor coupled to a memory, the processor configured to execute the following computer-executable components stored in the memory:
a first component configured to automatically construct a distributed application from a single tier application;
and
a second component configured to inject a first security component into the distributed application automatically during construction, the first security component is configured to control interaction based on transmission and validation of a secret identifier between a client and server indicative of one or more permissible client capabilities with respect to a server.

1 more element

Dependencies are inferred from the claim text.

Security by construction for distributed applications

Life of this patent

Security by construction for distributed applications

Life of this patent

Abstract

Claims20