CODE TRACKING AND IDENTIFICATION
One example method of operation may include identifying a plurality of code access events over a period of time, determining whether any of the code access events included any sensitive code segments, determining whether any of the code access events which included the sensitive code segments were unauthorized, and performing one or more automated actions to restrict code access permissions of one or more user profiles.
1 . A method comprising:
identifying a plurality of code access events over a period of time;
determining whether any of the code access events included any sensitive code segments;
determining whether any of the code access events which included the sensitive code segments were unauthorized; and
performing one or more automated actions to restrict code access permissions of one or more user profiles.
2 . The method of claim 1 , wherein the one or more automated actions comprise one or more of revoking user profile code access permissions, locking access to the sensitive code segments, and preventing code egress operations, wherein the code egress operations comprise one or more of moving the code, copying the code and storing the code in a new data storage location.
3 . The method of claim 1 , comprising
summing weights assigned to the unauthorized code access events;
creating a score based on the summed weights; and
determining whether the score exceeds a threshold.
4 . The method of claim 3 , wherein when the score exceeds the threshold, creating a code access violation notification.
5 . The method of claim 3 , comprising
initiating a code audit operation which identifies the code access events over the period of time based on code events stored in a code log.
6 . The method of claim 1 , comprising
determining whether a number of code clone events exceeded a clone event threshold; and
creating an alert when the clone event threshold is exceeded and locking access to the sensitive code segments.
7 . The method of claim 1 , comprising
determining whether the one or more unauthorized code access events were based on unauthorized code storage locations, unauthorized user profiles, and access attempts which did not use authorized tokens.
8 . An apparatus comprising:
a processor configured to
identify a plurality of code access events over a period of time;
determine whether any of the code access events included any sensitive code segments;
determine whether any of the code access events which included the sensitive code segments were unauthorized; and
perform one or more automated actions to restrict code access permissions of one or more user profiles.
9 . The apparatus of claim 8 , wherein the one or more automated actions comprise one or more of revocation of the user profile code access permissions, locked access to the sensitive code segments, and prevention of code egress operations, wherein the code egress operations comprise one or more of a code move, a code copy and a code storage in a new data storage location.
10 . The apparatus of claim 8 , wherein the processor is further configured to
sum weights assigned to the unauthorized code access events;
create a score based on the summed weights; and
determine whether the score exceeds a threshold.
11 . The apparatus of claim 10 , wherein when the score exceeds the threshold, the processor creates a code access violation notification.
12 . The apparatus of claim 11 , wherein the processor is further configured to
initiate a code audit operation which identifies the code access events over the period of time based on code events stored in a code log.
13 . The apparatus of claim 8 , wherein the processor is further configured to
determine whether a number of code clone events exceeded a clone event threshold; and
create an alert when the clone event threshold is exceeded and locking access to the sensitive code segments.
14 . The apparatus of claim 8 , wherein the processor is further configured to
determine whether the one or more unauthorized code access events were based on unauthorized code storage locations, unauthorized user profiles, and access attempts which did not use authorized tokens.
15 . A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform:
identifying a plurality of code access events over a period of time;
determining whether any of the code access events included any sensitive code segments;
determining whether any of the code access events which included the sensitive code segments were unauthorized; and
performing one or more automated actions to restrict code access permissions of one or more user profiles.
16 . The non-transitory computer readable storage medium of claim 5 , wherein the one or more automated actions comprise one or more of revoking user profile code access permissions, locking access to the sensitive code segments, and preventing code egress operations, wherein the code egress operations comprise one or more of moving the code, copying the code and storing the code in a new data storage location.
17 . The non-transitory computer readable storage medium of claim 15 , wherein the processor is further configured to perform:
summing weights assigned to the unauthorized code access events;
creating a score based on the summed weights; and
determining whether the score exceeds a threshold.
18 . The non-transitory computer readable storage medium of claim 17 , wherein when the score exceeds the threshold, creating a code access violation notification.
19 . The non-transitory computer readable storage medium of claim 15 , wherein the processor is further configured to perform:
initiating a code audit operation which identifies the code access events over the period of time based on code events stored in a code log.
20 . The non-transitory computer readable storage medium of claim 15 , wherein the processor is further configured to perform:
determining whether a number of code clone events exceeded a clone event threshold; and
creating an alert when the clone event threshold is exceeded and locking access to the sensitive code segments.