IP Library › Granted Patent US 10,089,463
Granted Patent B1
US 10,089,463 · App. 13/626,240 · Granted Oct 2, 2018

Managing security of source code

Inventors: Aaron T. Katz (Haverhill, MA); Daniel V. Bailey (Pepperell, MA); Yavir Amar (Ramla, IL)
Assignee: EMC IP Holding Company LLC
G06F21/563G06F21/125G06F21/50G06F21/57G06F21/60H04L63/083H04L29/06877H04L29/06884
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,089,463
App. No.
13/626,240
Filed
Sep 25, 2012
Granted
Oct 2, 2018
Kind
B1
Art Unit
2497
USPC
726/22
Abstract

A method is used in managing security of source code. Source code characteristics are derived from a source code change. Based on the source code characteristics, risk information associated with the source code change is produced.

Claims (22)

1. A computer-implemented method for use in managing security of source code, the computer-implemented method comprising:

receiving, from a user, an electronic request to submit a source code change;

performing an analysis of one or more prior source code changes associated with the user to determine the user's typical halstead complexity measure, typical cyclomatic complexity measure, typical afferent coupling measure, and typical efferent coupling measure, wherein said halstead measure describes a coding style of the user and is derived from a number of distinct operators, a number of distinct operands, a total number of operators, and a total number of operands in connection with the one or more prior source code changes, wherein the cyclomatic complexity measure relates to a number of linearly independent paths through a unit of a project, and wherein the afferent and efferent coupling measures relate respectively to a number of other classes that reference a class and a number of other classes referenced by a class;

determining a riskiness in connection with the received source code change by measuring a deviation in the received source code change from the said measures, wherein the riskiness indicates whether the user is genuine or fraudulent; and

based on the riskiness in connection with the received source code change, controlling submission of the source code change to a source code repository such that the source code change will be submitted if the riskiness indicates that the user is genuine and will be rejected if the riskiness indicates that the user is fraudulent.

2. The method of claim 1 , wherein the source code change originates from a developer workstation and is submitted to a source code repository.

3. The method of claim 1 , wherein the riskiness is used to help provide an intrusion-resilient source code repository.

4. The method of claim 1 , wherein determining the riskiness is based on profiling a user's coding style based on textual clues.

5. The method of claim 1 , wherein determining the riskiness is based on measuring the deviation in the change from a user's normal coding style.

6. The method of claim 1 , wherein determining the riskiness is based on measuring the deviation in the change from file types that a user typically edits.

7. The method of claim 1 , wherein determining the riskiness is based on measuring the deviation in the change from a user's typical comment style.

8. The method of claim 1 , wherein determining the riskiness is based on measuring the deviation in the change from a user's typical writing errors.

9. The method of claim 1 , wherein determining the riskiness is based on measuring the deviation in the change from a user's typical naming conventions.

10. A system for use in managing security of source code, the system comprising:

memory; and

processing circuitry coupled to the memory, the memory storing instructions which, when executed by the processing circuitry, cause the processing circuitry to:

receive, from a user, an electronic request to submit a source code change;

perform an analysis of one or more prior source code changes associated with the user to determine the user's typical halstead complexity measure, typical cyclomatic complexity measure, typical afferent coupling measure, and typical efferent coupling measure, wherein said halstead measure describes a coding style of the user and is derived from a number of distinct operators, a number of distinct operands, a total number of operators, and a total number of operands in connection with the one or more prior source code changes, wherein the cyclomatic complexity measure relates to a number of linearly independent paths through a unit of a project, and wherein the afferent and efferent coupling measures relate respectively to a number of other classes that reference a class and a number of other classes referenced by a class;

determine a riskiness in connection with the received source code change by measuring a deviation in the received source code change from the said measures, wherein the riskiness indicates whether the user is genuine or fraudulent; and

based on the riskiness in connection with the received source code change, control submission of the source code change to a source code repository such that the source code change will be submitted if the riskiness indicates that the user is genuine and will be rejected if the riskiness indicates that the user is fraudulent.

11. The system of claim 10 , wherein the source code change originates from a developer workstation and is submitted to a source code repository.

12. The system of claim 10 , wherein the riskiness is used to help provide an intrusion-resilient source code repository.

Assignments (10)
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (053546/0001) Recorded Jun 23, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC IP HOLDING COMPANY LLC
Reel/Frame 071642/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (045455/0001) Recorded May 20, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061753/0001 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (040136/0001) Recorded Apr 26, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061324/0001 →
RELEASE OF SECURITY INTEREST Recorded Nov 3, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL, L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 058216/0001 →
SECURITY AGREEMENT Recorded Apr 22, 2020
From: CREDANT TECHNOLOGIES INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 053546/0001 →
SECURITY AGREEMENT Recorded Mar 21, 2019
From: CREDANT TECHNOLOGIES, INC.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL USA L.P.; EMC CORPORATION; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.; EMC IP HOLDING COMPANY LLC
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
Reel/Frame 049452/0223 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 29, 2016
From: EMC CORPORATION
To: EMC IP HOLDING COMPANY LLC
Reel/Frame 040203/0001 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 040136/0001 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040134/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 25, 2012
From: KATZ, AARON T.; BAILEY, DANIEL V.; AMAR, YARIV
To: EMC CORPORATION
Reel/Frame 029020/0822 →
Cited By (3)
US 12,299,131 US 12,450,359 US 12,462,019