Secure web application development and execution environment
View Patent ↗Providing secure web application development and operation. In a web development environment, code developed for the web application is analyzed to identify vulnerabilities and remedial actions are identified. The remedial actions may be automatically invoked or a developer can be prompted to take particular actions to remediate the vulnerability.
1. A method for developing a secure web application, the method comprising:
in a web application development environment:
analyzing code, by a processor, associated with a web application to identify at least one security vulnerability;
comparing the at least one security vulnerability to a vulnerability datastore, which stores validation routines for verifying input data associated with the at least one security vulnerability, to identify a recommended validation routine; and
alleviating, by the processor, the security vulnerability by invoking a developer interface that enables a developer of the web application to select from a group of remediation actions including:
generating remediation code and inserting the remediation code into the web application;
generating remediation code and replacing a section of insecure code within the web application with the remediation code.
2. The method of claim 1 , further comprising modifying the source code associated with the web application to include the remediation.
3. The method of claim 1 , wherein the step of analyzing code associated with the web application comprises analyzing source code associated with the web application.
4. The method of claim 1 , wherein the step of analyzing code associated with the web application comprises performing a static analysis on binary code associated with the web application.
5. The method of claim 1 , further comprising remediating the operation of the web application if a restrictive policy is violated.
6. The method of claim 1 , wherein the remediation code entered into the secure web application to alleviate a security vulnerability operates to enable a developer of the web application to validate the vulnerability.
7. The method of claim 6 , wherein the remediation code further enables the steps of:
displaying the identity of the security vulnerability to a developer of the web application; and
displaying a recommended validation routine to be applied to the at least one security vulnerability.
8. The method of claim 1 , wherein the remediation code entered into the secure web application to alleviate a security vulnerability operates to automatically remediate the web application vulnerability.
9. The method of claim 8 , further comprising comparing the at least one security vulnerability to a vulnerability datastore to identify a remediation action to be taken.
10. A non-transitory computer-readable storage medium that stores a web application development environment program that, when executed, causes a processor to:
operate a vulnerability identification module to analyze code of a web application and identify one or more vulnerabilities within said code;
compare the one or more vulnerabilities to a vulnerability datastore, which stores validation routines for verifying input data associated with the at least one security vulnerability, to identify a recommended validation routine; and
operate a remediation module to alleviate one or more of the vulnerabilities identified by the vulnerability detection module by switching at least one existing input authentication feature of said code between an enabled state and a disabled state.
11. The computer-readable storage medium of claim 10 , wherein the web application development environment program further causes the processor to scan source code associated with the web application to identify said one or more vulnerabilities.
12. The computer-readable storage medium of claim 10 , wherein the web application development environment program further causes the processor to operate an interactive wizard as part of the remediation module, the interactive wizard enables a developer of the web application to validate the vulnerabilities.
13. The computer-readable storage medium of claim 12 , wherein the web application development environment program further causes the processor to operate the interactive wizard to provide a recommended validation routine for at least one of the vulnerabilities to the developer.
14. The computer-readable storage medium of claim 10 , wherein the web application development environment program further causes the processor to operate the remediation module to process vulnerability data received from a web application assessment tool.
15. The computer-readable storage medium of claim 10 , wherein the web application development environment program further causes the processor to operate the remediation module to automatically modify source code associated with the web application to alleviate a vulnerability.
16. A system for developing a secure web application, the system comprising:
a processor;
a web application development environment stored on a computer-readable storage medium and executed by the processor; and
a vulnerability detection module integrated with operations of the web application development environment, the vulnerability detection module comprising:
logic configured to analyze code associated with a web application being developed via the web application development environment;
logic configured to identify vulnerabilities in the web application;
logic configured to compare at least one security vulnerability to a vulnerability datastore, which stores validation routines for verifying input data associated with the at least one security vulnerability, to identify a recommended validation routine; and
a remediation module integrated with operations of the web application development environment, the remediation module comprising:
logic configured to provide remediation measures to alleviate at least one of said vulnerabilities by selectively forcing at least one existing authentication feature of said code to be enabled or disabled.
17. The system of claim 16 , wherein the vulnerability detection module scans source code of said web application.
18. The system of claim 16 , wherein the vulnerability detection module analyzes binary code of said web application.
19. The system of claim 16 , wherein the remediation module includes a wizard that provides remediation options to a developer of said web application.
20. The system of claim 16 , wherein the remediation module automatically identifies a remediation measure and implements the remediation measure.