Amazon Technologies, Inc.

Correct Computation, Inc.

Anwar Mamat

Michael W Hicks

Neha Rungta

Mark Edward Stalzer

Emina Torlak

Richard Matthew Mccutchen

Kyle Headley

John Holman Kastner

Andrew Marshall Wells

Aaron Joseph Eline

Ian Nicholas Sweet

Julian Lovelock

Shaobo He

Kesha Hanne Hietala

B S Lavender

Craig Ryan Disselkoen

Darin Mcadams

A system and method for authorization policy evaluation. Authorization policies are authored in a general-purpose authorization language. An evaluation engine is used in a provider network by application developers to manage access within their applications based on fine-grained permissions. The policy language combines elements of role-based and attributed-based access control within an intuitive syntax and efficient evaluation strategy. The policy syntax separates role-based expressions of a policy from attribute-based expressions of the policy.

Authorization policy evaluation

In one embodiment, an application programming interface (API) and machine code associated with a software library are accessed. Data sources and data sinks in the software library are identified based on the API, and a data flow among the data sources and data sinks is determined based on a dynamic analysis of the machine code associated with the software library. A flow graph associated with the software library is then generated to represent the data flow among the data sources and data sinks, and a source code model associated with the software library is generated based on the flow graph.

Automated generation of source code models from machine code for code analysis

Growing community of inventors

Chantilly, VA, United States of America

Anwar Mamat