Granted Patent B2

US 10,476,900 · App. 15/282,659 · Granted Nov 12, 2019

Inventor: Igor G. Muttik (Berkhamsted, GB)

Assignee: McAfee, LLC.

H04L63/1425G06F16/951G06F21/629G06F21/6245H04L63/101G06F2221/033

Abstract

Claims (44)

1. A computing apparatus comprising:

a processor;

a memory;

a data interface; and

one or more logic elements comprising a verification engine to:

receive via the data interface an input script comprising a request to access enterprise data;

analyze the input script to determine that the input script complies with a data request criterion, wherein analyzing the input script comprises assigning the input script a reputation;

apply an application programming interface (API) to the input script to collect the enterprise data;

analyze and process the collected enterprise data to ensure that it exposes no sensitive data; and

send the enterprise data via the data interface.

2. The computing apparatus of claim 1 , wherein the request to access enterprise data is a third-party access request, and wherein the data request criterion is a third-party data access criterion.

3. The computing apparatus of claim 1 , wherein analyzing the input script further comprises ensuring that the input script includes only authorized API calls.

4. The computing apparatus of claim 1 , wherein analyzing the input script further comprises symbolic analysis.

5. The computing apparatus of claim 4 , wherein the symbolic analysis of the input script comprises a Coq proof.

6. The computing apparatus of claim 4 , wherein the symbolic analysis of the input script comprises analysis via a Maude system.

7. The computing apparatus of claim 1 , wherein assigning the input script a reputation comprises querying a security services provider.

8. The computing apparatus of claim 1 , wherein assigning the input script a reputation comprises receiving malware attack reports about a source of the input script.

9. The computing apparatus of claim 1 , wherein assigning the input script a reputation comprises counting telemetry entries from a source country of the input script.

10. The computing apparatus of claim 1 , wherein the API provides only a subset of available operations for a specification language.

11. The computing apparatus of claim 1 , wherein the input script is an input source file.

12. The computing apparatus of claim 1 , wherein the input script is a binary executable object with attached debugging information.

13. One or more tangible, non-transitory computer-readable storage mediums having stored thereon executable instructions for providing a verification engine to:

receive via a data interface an input script comprising a request to access enterprise data;

analyze the input script to determine that the input script complies with a data request criterion, wherein analyzing the input script comprises assigning the input script a reputation;

apply an application programming interface (API) to the input script to collect the enterprise data;

analyze and process the collected enterprise data to ensure that it exposes no sensitive data; and

send the enterprise data via the data interface.

14. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein the request to access enterprise data is a third-party access request, and wherein the data request criterion is a third-party data access criterion.

15. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein analyzing the input script further comprises ensuring that the input script includes only authorized API calls.

16. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein analyzing the input script further comprises symbolic analysis.

17. The one or more tangible, non-transitory computer-readable storage mediums of claim 16 , wherein the symbolic analysis of the input script comprises a Coq proof or analysis via a Maude system.

18. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein assigning the input script a reputation comprises querying a security services provider.

19. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein assigning the input script a reputation comprises receiving malware attack reports about a source of the input script.

20. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein assigning the input script a reputation comprises counting telemetry entries from a source country of the input script.

21. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein the API provides only a subset of available operations for a specification language.

22. A computer-implemented method of providing verification of a data request, comprising:

receiving via a data interface an input script comprising a request to access enterprise data;

analyzing the input script to determine that the input script complies with a data request criterion, wherein analyzing the input script comprises assigning the input script a reputation;

applying an application programming interface (API) to the input script to collect the enterprise data;

analyzing and processing the collected enterprise data to ensure that it exposes no sensitive data; and

sending the enterprise data via the data interface.

23. The method of claim 22 , wherein the request to access enterprise data is a third-party access request, and wherein the data request criterion is a third-party data access request criterion.

24. The method of claim 22 , wherein analyzing the input script further comprises ensuring that the input script includes only authorized API calls.

25. The method of claim 22 , wherein analyzing the input script further comprises symbolic analysis.

Assignments (21)

Continuity (1)

Cited By (1)

US 12,238,101