IP Library › Granted Patent US 10,789,159
Granted Patent B2
US 10,789,159 · App. 16/211,126 · Granted Sep 29, 2020

Non-regressive injection of deception decoys

Inventors: Cedric Hebert (Mougins, FR); Henrik Plate (Valbonne, DE)
Assignee: SAP SE
G06F11/3692G06F8/10G06F8/30G06F11/3664G06F11/3672G06F11/3684G06F11/3688G06F21/54G06F8/20G06F21/554
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,789,159
App. No.
16/211,126
Granted
Sep 29, 2020
Kind
B2
Abstract

Systems and methods, as well as computing architecture for implementing the same, for decoy injection into an application. The systems and methods include splitting a standard test phase operation into two complementary phases, and add new unit tests to the process, dedicated to testing the proper coverage of the decoys and avoiding non-regression of the original code.

Claims (50)

1. A computer implemented method comprising:

receiving, by one or more processors of an application development environment, functional requirements for an application;

generating, by the one or more processors, application code for the application based on the functional requirements, the application code being configured to execute one or more application functions;

receiving, by a weaving engine of the application development environment, decoy code representing one or more decoy data and/or functions to detect invocation by an attacker;

inserting, by the weaving engine, the decoy code into the application with the application code to produce modified source code;

generating, by a test engine of the application development environment, one or more functional tests of the application code;

generating, by the test engine, one or more decoy tests of the decoy code;

executing, by the test engine, the one or more functional tests on the application code;

executing, by the test engine, the one or more functional tests and the one or more decoy tests of the decoy code on the modified source code; and

comparing, by a verifier of the application development environment, results from the one or more functional tests executed on the application code and the one or more decoy tests executed on the modified source code to determine whether a regression exists in the application code by the inserting of the decoy code.

2. The computer implemented method in accordance with claim 1 , further comprising generating, by the verifier, a report of the results from the from the number of combinations of the one or more functional tests and the one or more decoy tests.

3. The computer implemented method in accordance with claim 1 , wherein the comparing results from the number of combinations of the one or more functional tests and the one or more decoy tests further determines whether the decoy code of the modified source code is triggered.

4. The computer implemented method in accordance with claim 1 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on the application code.

5. The computer implemented method in accordance with claim 1 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on the modified source code.

6. The computer implemented method in accordance with claim 1 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on the decoy code.

7. The computer implemented method in accordance with claim 1 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on one or more of the application code, the modified source code, and the decoy code.

8. The computer implemented method of claim 1 , wherein the decoy code is a lure to detect an attack of a system executing the application code.

9. A computer program product comprising a non-transitory machine-readable medium storing instructions that, when executed by at least one programmable processor, cause the at least one programmable processor to perform operations comprising:

receiving, by one or more processors of an application development environment, functional requirements for an application;

generating, by the one or more processors, application code for the application based on the functional requirements, the application code being configured to execute one or more application functions;

receiving, by a weaving engine of the application development environment, decoy code representing one or more decoy data and/or functions to detect invocation by an attacker;

inserting, by the weaving engine, the decoy code into the application with the application code to produce modified source code;

generating, by a test engine of the application development environment, one or more functional tests of the application code;

generating, by the test engine, one or more decoy tests of the decoy code;

executing, by the test engine, the one or more functional tests on the application code;

executing, by the test engine, the one or more functional tests and the one or more decoy tests of the decoy code on the modified source code; and

comparing, by a verifier of the application development environment, results from the one or more functional tests executed on the application code and the one or more decoy tests executed on the modified source code to determine whether a regression exists in the application code by the inserting of the decoy code.

10. The computer program product in accordance with claim 9 , wherein the operations further comprise generating a report of the results from the from the number of combinations of the one or more functional tests and the one or more decoy tests.

11. The computer program product in accordance with claim 9 , wherein the comparing results from the number of combinations of the one or more functional tests and the one or more decoy tests further determines whether the decoy code of the modified source code is triggered.

12. The computer program product in accordance with claim 9 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on the application code.

13. The computer program product in accordance with claim 9 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on the modified source code.

14. The computer program product in accordance with claim 10 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on the decoy code.

15. The computer program product in accordance with claim 11 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on one or more of the application code, the modified source code, and the decoy code.

16. A system comprising:

one or more programmable processors forming an application development environment comprising a weaving engine, a test engine, and a verifier; and

a machine-readable medium storing instructions that, when executed by the one or more programmable processors, cause the one or more programmable processors to perform operations comprising:

receiving, by one or more processors of an application development environment, functional requirements for an application;

generating, by the one or more processors, application code for the application based on the functional requirements, the application code being configured to execute one or more application functions;

receiving, by a weaving engine of the application development environment, decoy code representing one or more decoy data and/or functions to detect invocation by an attacker;

inserting, by the weaving engine, the decoy code into the application with the application code to produce modified source code;

generating, by a test engine of the application development environment, one or more functional tests of the application code;

generating, by the test engine, one or more decoy tests of the decoy code;

executing, by the test engine, the one or more functional tests on the application code;

executing, by the test engine, the one or more functional tests and the one or more decoy tests of the decoy code on the modified source code; and

comparing, by a verifier of the application development environment, results from the one or more functional tests executed on the application code and the one or more decoy tests executed on the modified source code to determine whether a regression exists in the application code by the inserting of the decoy code.

17. The computer program product in accordance with claim 16 , wherein the comparing results from the number of combinations of the one or more functional tests and the one or more decoy tests further determines whether the decoy code of the modified source code is triggered.

18. The computer program product in accordance with claim 16 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on the application code.

19. The computer program product in accordance with claim 16 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on the modified source code.

20. The computer program product in accordance with claim 16 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on the decoy code.

21. The computer program product in accordance with claim 16 , wherein the executing the one or more functional tests and the one or more decoy tests of the decoy code includes executing the one or more functional tests and the one or more decoy tests of the decoy code on one or more of the application code, the modified source code, and the decoy code.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 12, 2019
From: HEBERT, CEDRIC; PLATE, HENRIK
To: SAP SE
Reel/Frame 050982/0251 →
Continuity (1)
Related Publication 20200183820A1 · Jun 11, 2020