Methods and systems for solving problems with hard-coded credentials
The present invention discloses methods, media, and systems for handling hard-coded credentials, the system including: an interception module configured for: intercepting credential usage upon receiving an application request for application credentials in order to provide access to a host application; a configuration/settings module configured for reading system configurations and settings for handling the application credentials; a credential-mapping module configured for: applying appropriate credential-mapping logic based on the system configurations and settings; and upon determining that the application credentials need to be replaced, obtaining appropriate credentials from a secured storage. Preferably, the interception module is further configured for: prior to the intercepting, hooking a connection API of the host application upon access of a credential location in which the application credentials are stored; and wherein the credential-mapping module is further configured for: subsequent to the hooking, using the appropriate credentials to connect the host application with the connection API.
1. A method for eliminating security risks emanating from hard-coded application credentials used in application-to-application authentication, comprising: (a) intercepting hard-coded application credentials used in application-to application-authentication; (b) applying credential-mapping logic to map the hard-coded application credentials with replacement application credentials from secured storage; and
(c) supplying said replacement application credentials to be used in the application-to-application authentication instead of the hard-coded application credentials so as to render the hard-coded application credentials non-functional as application credentials, thereby eliminating security risks emanating from the hard-coded application credentials, the method of steps is performed by a computer system.
2. The method of claim 1 , wherein the step of intercepting hard-coded application credentials includes hooking a connection API of a host application used in the application-to-application authentication.
3. The method of claim 1 , wherein the step of intercepting hard-coded application credentials includes hooking at least one API associated with execution of a command.
4. The method of claim 1 , wherein the step of intercepting hard-coded application credentials includes hooking file-handling API of a file containing the hard-coded application credentials.
5. The method of claim 1 further comprising a step of:
(d) recording information regarding hard-coded application credential usage.
6. The method of claim 1 , wherein the step of intercepting hard-coded application credentials includes intercepting network packets that include the hard-coded application credentials.
7. The method of claim 1 , further comprising a step of:
(d) synchronizing said replacement application credentials with a host application used in the application-to application authentication.
8. The method of claim 1 , further comprising a step of determining a need to replace the hard-coded application credentials based on system configurations or system settings.
9. A non-transitory, computer-readable storage medium comprising a computer-readable program code embodied therein, said program code configured to cause a computer that executes said program code to:
(a) intercept hard-coded application credentials used in application-to application authentication;
(b) map the hard-coded application credentials with replacement application credentials from secured storage; and
(c) supply said replacement application credentials to be used in the application-to-application authentication instead of the hard-coded application credentials so as to render the hard-coded application credentials non-functional as application credentials, thereby eliminating security risks emanating from the hard-coded application credentials.
10. The non-transitory, computer-readable storage medium of claim 9 , wherein said program code configured to cause a computer that executes said program code to intercept hard-coded application credentials includes program code to hook a connection API of a host application used in the application-to-application authentication.
11. The non-transitory, computer-readable storage medium of claim 9 , wherein said program code configured to cause a computer that executes said program code to intercept hard-coded application credentials includes program code to hook at least one API associated with execution of a command.
12. The non-transitory, computer-readable storage medium of claim 9 , wherein said program code configured to cause a computer that executes said program code to intercept hard-coded application credentials includes program code to hook a file-handling API associated with at least one file containing the hard-coded application credentials.
13. The non-transitory, computer-readable storage medium of claim 9 , further comprising program code configured to record information regarding said hard-coded application credential usage.
14. The non-transitory, computer-readable storage medium of claim 9 , further comprising program code configured to intercept network packets that include said hard-coded application credentials.
15. The non-transitory, computer-readable storage medium of claim 9 , further comprising program code configured to synchronize said replacement application credentials with a host application used in the application-to application authentication.
16. The non-transitory, computer-readable storage medium of claim 9 , further comprising program code to determine a need to replace the hard-coded application credentials based on system configurations or system settings.
17. A computer system comprising:
a hardware processor;
said hardware processor configured to:
intercept hard-coded application credentials used in application-to-to application authentication;
apply credential-mapping logic to map the hard-coded application credentials with replacement application credentials from secured storage; and
c) supply said replacement application credentials to be used in the application-to-application authentication so as to render the hard-coded application credentials non-functional as application credentials, thereby eliminating security risks emanating from the hard-coded application credentials.
18. The computer system of claim 17 , wherein said hardware processor further configured to intercept hard-coded application credentials using a method of hooking a connection API of a host application used in the application-to-application authentication.
19. The computer system of claim 17 , wherein said hardware processor further configured to intercept hard-coded application credentials using a method of hooking at least one API associated with execution of a command.
20. The computer system of claim 17 , wherein said hardware processor further configured to intercept hard-coded application credentials using a method of hooking a file-handling API associated with at least one file containing the hard-coded application credentials.
21. The computer system of claim 17 , wherein said hardware processor further configured to record information regarding said hard-coded application credential usage.
22. The computer system of claim 17 , wherein said hardware processor configured to intercept hard-coded application credentials using a method of intercepting network packets containing said hard-coded application credentials.
23. The computer system of claim 17 , wherein said hardware processor further configured to synchronize said replacement application credentials with a host application used in the application-to-application authentication.
24. The computer system of claim 17 , wherein the computer system is configured by way of either, hardware, or a combination of software and hardware.
25. The computer system of claim 24 , wherein said hardware includes updatable hardware.
26. The computer system of claim 17 , wherein said hardware processor further configured to determine a need for replacing the hard-coded application credentials based on system configuration or system settings.