Granted Patent B2

US 12,204,637 · App. 17/209,603 · Granted Jan 21, 2025

Inventors: Shripad Nadgowda (Elmsford, NY); Fabio Abreu Oliveira (White Plains, NY)

Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION

G06F21/52G06F2221/033

Abstract

Claims (39)

1. A computer implemented method for continuous compliance profiling, the method comprising:

creating an application security profile indicating a set of permissions enabled for an application, comprising identifying and analyzing source artifacts corresponding to the application within repositories;

associating an already running workload with one or more source files of the application;

executing the already running workload;

capturing a workload security profile with respect to one or more operations executed by the already running workload, wherein the workload security profile indicates a set of permissions utilized by the running workload;

continuously comparing the workload security profile of the already running workload and the application security profile to identify one or more differences; and

recommending a change to the application security profile according to the identified one or more differences.

2. The computer implemented method of claim 1 , further comprising altering the application security profile according to the recommended change.

3. The computer implemented method of claim 1 , further comprising mapping the application security profile to one or more security standards.

4. The computer implemented method of claim 1 , further comprising monitoring the running workload to identify one or more executed operations with respect to the running workload.

5. The computer implemented method of claim 4 , wherein capturing a workload security profile includes identifying one or more privileges required for the one or more executed operations to properly execute.

6. The computer implemented method of claim 2 , further comprising adjusting one or more security standard compliances according to the altered application security profile.

7. A computer program product for, the computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising instructions to:

create an application security profile indicating a set of permissions enabled for an application, comprising identifying and analyzing source artifacts corresponding to the application within repositories;

associate an already running workload with one or more source files of the application;

execute the already running workload;

capture a workload security profile with respect to one or more operations executed by the already running workload, wherein the workload security profile indicates a set of permissions utilized by the already running workload;

continuously compare the workload security profile of the already running workload and the application security profile to identify one or more differences; and

recommend a change to the application security profile according to the identified one or more differences.

8. The computer program product of claim 6 , further comprising instructions to alter the application security profile according to the recommended change.

9. The computer program product of claim 6 , further comprising instructions to map the application security profile to one or more security standards.

10. The computer program product of claim 6 , further comprising instructions to monitor the running workload to identify one or more executed operations with respect to the running workload.

11. The computer program product of claim 10 , wherein instructions to capture a workload security profile include instructions to identify one or more privileges required for the one or more executed operations to properly execute.

12. The computer program product of claim 7 , further comprising instructions to adjust one or more security standard compliances according to the altered application security profile.

13. A computer system for, the computer system comprising:

one or more computer processors;

one or more computer-readable storage media;

program instructions stored on the computer-readable storage media for execution by at least one of the one or more processors, the program instructions comprising instructions to:

create an application security profile indicating a set of permissions enabled for an application, comprising identifying and analyzing source artifacts corresponding to the application within repositories;

associate an already running workload with one or more source files of the application;

execute the already running workload;

capture a workload security profile with respect to one or more operations executed by the already running workload, wherein the workload security profile indicates a set of permissions utilized by the already running workload;

continuously compare the workload security profile of the already running workload and the application security profile to identify one or more differences; and

recommend a change to the application security profile according to the identified one or more differences.

14. The computer system of claim 13 , further comprising instructions to alter the application security profile according to the recommended change.

15. The computer system of claim 13 , further comprising instructions to map the application security profile to one or more security standards.

16. The computer system of claim 13 , further comprising instructions to monitor the running workload to identify one or more executed operations with respect to the running workload.

17. The computer system of claim 16 , wherein instructions to capture a workload security profile include instructions to identify one or more privileges required for the one or more executed operations to properly execute.

Assignments (1)

Continuity (1)

References Cited (20)