Rapid7, Inc.

Pivia, Inc.

Tcell.io, Inc.

Michael Feiertag

Garrett Held

Andre Eriksson

William Saar

Sudhir Mohan

Daniel S Jordan

Blake Livingston

Robert M Tesh

A system and method for application software security and auditing are disclosed. A particular embodiment includes an application security management system configured to: instrument one or more data input and output points of an application for one or more instances of data identified as sensitive data, access one or more policies corresponding to the one or more instances of the sensitive data, trace the one or more instances of the sensitive data through the application in association with the one or more policies, and generate an audit of each instance of the sensitive data indicating a route from which the sensitive data is accessed, to where the sensitive data is written, and where the sensitive data surfaces in the application.

System and method for application software security and auditing

A system and method for application software security and auditing are disclosed. A particular embodiment includes an application security management system configured to: cause installation of a client application (app) agent in a client app on a client app server; communicate with the client app agent via a data network to collect trace data corresponding to data elements accessed in the client app and previously identified as sensitive data; cause transfer of information indicative of the trace data to a host site via the data network; identify a policy corresponding to the trace data; and apply the identified policy to the sensitive data elements in the client app.

A system for detecting unusual code operating in a browser agent comprises a processor and a memory. The processor is to: determine that a block of code is running on a web page; parse the block of code into a parsed template; obtain indicia associated with the block of code; and determine that the parsed template is unusual based at least in part on the parsed template and the indicia. The memory is coupled with the processor and is configured to provide the processor with instructions.

Detection of code modification

In an embodiment, a method comprises receiving a hit rate and a change rate for a data object stored in a cache. The method also includes updating a time-to-live period for the data object stored in the cache based on the hit rate and the change rate for the data object.

Growing community of inventors

San Francisco, CA, United States of America

Michael Feiertag