IP Library Granted Patent US 11,487,641
Granted Patent B1
US 11,487,641 · App. 16/694,107 · Granted Nov 1, 2022

Micro services recommendation system for identifying code areas at risk

Inventors: Avitan Gefen (Lehavim, IL); Roi Gamliel (Tkuma, IL); Amihai Savir (Sansana, IL)
Assignee: EMC IP Holding Company LLC
G06F11/3612G06F8/75G06F11/302G06F11/3624
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,487,641
App. No.
16/694,107
Granted
Nov 1, 2022
Kind
B1
Abstract

Identifying risky code in microservices is described. A system identifies a modification to code segments in an application. The system determines a segments similarity score based on comparing the code segments, which are in a microservice of the application, against other code segments, which are in another microservice of the application. The system determines whether the segments similarity score satisfies a segments similarity threshold. The system outputs a recommendation to make the modification, which was made to the code segments in the microservice of the application, to the other code segments in the other microservice in the application, in response to a determination that the segment similarity score satisfies the similarity threshold.

Claims (40)

1. A system for identifying risky code in microservices, the system comprising:

one or more processors; and

a non-transitory computer readable medium storing a plurality of instructions, which when executed, cause the one or more processors to:

generate a graph of connected nodes comprising nodes which represent atomic parts of executable code in code segments in micro services of an application, an atomic part of executable code comprising a functionally irreducible portion of a computer program that contains executable instructions;

identify, by applying graph analysis over the graph, a node at any graphical level that represents an atomic part of executable code in code segments modified by a modification, and in a microservice in the application, and other connected nodes at any graph levels that represent other atomic parts of executable code in other code segments in other microservices in the application;

determine a segments similarity score based on comparing the modified atomic part of executable code in the code segments represented by the identified node, and in the microservice of the application, against another atomic part of executable code in other code segments represented by another node, and in another microservice of the application;

determine whether the segments similarity score satisfies a segments similarity threshold; and

output a recommendation to make the modification, which was made to the code segments in the microservice of the application, to the other code segments in the other microservice in the application, in response to a determination that the segments similarity score satisfies the segments similarity threshold.

2. The system of claim 1 , wherein identifying the modification to the code segments in the application comprises identifying the modification in an atomic part of executable code in the code segments in the microservice of the application.

3. The system of claim 1 , wherein comparing the code segments against the other code segments comprises comparing a copy of an atomic part of executable code in the code segments, which was created before the modification to the code segments, against another atomic part of executable code in the other code segments.

4. The system of claim 1 , wherein comparing the code segments against the other code segments comprises comparing an atomic part of executable code in the code segments, after the modification was made to the code segments, against another atomic part of executable code in the other code segments.

5. The system of claim 1 , wherein the plurality of instructions further causes the processor to:

output an option to make the modification, which was made to the code segments in the microservice of the application, to the other code segments in the other microservice of the application; and

make the modification to the other code segments in the other microservice of the application, in response to receiving a selection of the option to make the modification to the other code segments in the other microservice of the application.

6. The system of claim 5 , wherein making the modification to the other code segments in the other microservice of the application comprises making the modification, which was made to an atomic part of executable code in the code segments in the microservice of the application, to another atomic part of executable code in the other code segments in the other microservice of the application.

7. A computer-implemented method for identifying risky code in microservices, the computer-implemented method comprising:

generating a graph of connected nodes comprising nodes which represent atomic parts of executable code in code segments in microservices of an application, an atomic part of executable code comprising a functionally irreducible portion of a computer program that contains executable instructions;

identifying, by applying graph analysis over the graph, a node at any graph level that represents an atomic part of executable code in code segments modified by a modification, and in a microservice in the application, and other connected nodes at any graph levels that represent other atomic parts of executable code in other code segments in other microservices in the application;

determining a segments similarity score based on comparing the modified atomic part of executable code in the code segments represented by the identified node, and in the microservice of the application, against another atomic part of executable code in other code segments represented by another node, and in another microservice of the application;

determining whether the segments similarity score satisfies a segments similarity threshold; and

outputting a recommendation to make the modification, which was made to the code segments in the microservice of the application, to the other code segments in the other microservice in the application, in response to a determination that the segments similarity score satisfies the segments similarity threshold.

8. The computer-implemented method of claim 7 , wherein identifying the modification to the code segments in the application comprises identifying the modification in an atomic part of executable code in the code segments in the microservice of the application.

9. The computer-implemented method of claim 7 , wherein comparing the code segments against the other code segments comprises comparing a copy of an atomic part of executable code in the code segments, which was created before the modification to the code segments, against another atomic part of executable code in the other code segments.

10. The computer-implemented method of claim 7 , wherein comparing the code segments against the other code segments comprises comparing an atomic part of executable code in the code segments, after the modification was made to the code segments, against another atomic part of executable code in the other code segments.

11. The computer-implemented method of claim 7 , wherein the computer-implemented method further comprises:

outputting an option to make the modification, which was made to the code segments in the microservice of the application, to the other code segments in the other microservice of the application; and

making the modification to the other code segments in the other microservice of the application, in response to receiving a selection of the option to make the modification to the other code segments in the other microservice of the application.

12. The computer-implemented method of claim 11 , wherein making the modification to the other code segments in the other microservice of the application comprises making the modification, which was made to an atomic part of executable code in the code segments in the microservice of the application, to another atomic part of executable code in the other code segments in the other microservice of the application.

13. A computer program product for identifying risky code in microservices, the computer program product comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein to be executed by one or more processors, the program code including instructions to:

generate a graph of connected nodes comprising nodes which represent atomic parts of executable code in code segments in microservices of an application, an atomic part of executable code comprising a functionally irreducible portion of a computer program that contains executable instructions;

identify, by applying graph analysis over the graph, a node at any graph level that represents an atomic part of executable code in code segments modified by a modification, and in a microservice in the application, and other connected nodes at any graph levels that represent other atomic parts of executable code in other code segments in other microservices in the application;

determine a segments similarity score based on comparing the modified atomic part of executable code in the code segments represented by the identified node, and in the microservice of the application, against another atomic part of executable code in other code segments represented by another node, and in another microservice of the application;

determine whether the segments similarity score satisfies a segments similarity threshold; and

output a recommendation to make the modification, which was made to the code segments in the microservice of the application, to the other code segments in the other microservice in the application, in response to a determination that the segments similarity score satisfies the segments similarity threshold.

14. The computer program product of claim 13 , wherein identifying the modification to the code segments in the application comprises identifying the modification in an atomic part of executable code in the code segments in the microservice of the application.

15. The computer program product of claim 13 , wherein comparing the code segments against the other code segments comprises comparing a copy of an atomic part of executable code in the code segments, which was created before the modification to the code segments, against another atomic part of executable code in the other code segments.

16. The computer program product of claim 13 , wherein comparing the code segments against the other code segments comprises comparing an atomic part of executable code in the code segments, after the modification was made to the code segments, against another atomic part of executable code in the other code segments.

17. The computer program product of claim 13 , wherein the program code includes further instructions to:

output an option to make the modification, which was made to the code segments in the microservice of the application, to the other code segments in the other microservice of the application; and

make the modification to the other code segments in the other microservice of the application, in response to receiving a selection of the option to make the modification to the other code segments in the other microservice of the application, wherein making the modification to the other code segments in the other microservice of the application comprises making the modification, which was made to an atomic part of executable code in the code segments in the microservice of the application, to another atomic part of executable code in the other code segments in the other microservice of the application.

Assignments (9)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (052216/0758) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
Reel/Frame 060438/0680 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053311/0169) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
Reel/Frame 060438/0742 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST AF REEL 052243 FRAME 0773 Recorded Nov 2, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
Reel/Frame 058001/0152 →
SECURITY INTEREST Recorded Jun 5, 2020
From: DELL PRODUCTS L.P.; EMC CORPORATION; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 053311/0169 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 26, 2020
From: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
Reel/Frame 052243/0773 →
PATENT SECURITY AGREEMENT (NOTES) Recorded Mar 24, 2020
From: DELL PRODUCTS L.P.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
Reel/Frame 052216/0758 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 10, 2019
From: GEFEN, AVITAN; GAMLIEL, ROI; SAVIR, AMIHAI
To: EMC IP HOLDING COMPANY LLC
Reel/Frame 051229/0149 →