Red Hat, Inc.

James Robert Bowes

Devan C Goodwin

Steve Bradford Milner

Bryan Michael Kearney

Jesus M Rodriguez

Vincent Batts

Christopher Duryee

William Poteat

Systems and methods for a security tool that verifies the security of a software package. An example method may involve identifying a plurality of components contained in a software package comprising one of a JAR file, an Android application package, a docker image, a container file, or a virtual machine image; comparing the components contained in the software package to a list of known components; classifying the software package as insecure when at least one of the components matches an insecure component, or as secure when each of the compared components matches a corresponding secure component on the list of known components; preventing addition of the software package to a software repository when the software package is classified as insecure; and when insecure, providing an interface to enable a user to request the components of the software package be added as a secure component on the list of known components.

Detection of malicious software packages

A software repository offering a software package or a computing system downloading a software package can utilize a security tool to verify the security of the software package. The security tool can check and verify that the software package is secure utilizing a black list of components. To check the security, the security tool can compare the components (archival files) of the software package to the black list. A black list can include a list of components that are known to be insecure.

A subscription proxy receives, from an end user system, a request for a resource provided by a content delivery network, the request comprising a local credential associated with the end user system. The subscription proxy identifies a remote credential associated with the content delivery network and corresponding to the local credential. The subscription proxy replaces the local credential in the request with the corresponding remote credential and sends the request for the resource with the remote credential to the content delivery network.

Replacement of security credentials for secure proxying

A server detects a product asset management operation and generates an event message corresponding to the product asset management operation. The event message includes data describing the product asset management operation. The server sends the event message to one or more message queues. One or more listeners that are associated to the one or more message queues can obtain the event message to perform an auditing action that indicates to a user an occurrence of the product asset management operation.

Message queue based product asset management auditing system

An example method of compressing a set of content paths includes identifying a set of content paths associated with a client. The method also includes determining a condensed path tree expressing the set of content paths. The method further includes determining a path node tree including a set of path nodes. Each path node of the set of path nodes represents from the condensed path tree a connector node including one or more segment strings as a name and one or more nodes referenced by the connector node. The method also includes encoding, based on a frequency of appearance of a segment string as a name in the set of path nodes, the set of content paths. The method further includes compressing the set of content paths. The method also includes providing a digital certificate including the compressed and encoded set of content paths.

Compression of content paths in a digital certificate

A client computing system determines whether an entitlement for a product is valid for a first point in time. Upon determining that the entitlement for the product is not valid for the first point in time, the client computing system sends a first entitlement request to an entitlement server. Upon determining that the entitlement for the product is valid for the first point in time, the client computing system determines whether the entitlement for the product is valid for a second point in time. Upon determining that the entitlement for the product is not valid for the second point in time, the client computing system sends a second entitlement request to the entitlement server.

Growing community of inventors

Dartmouth, Canada

James Robert Bowes