Veracode, Inc.

Sun Microsystems, Inc.

Highground Systems, Inc.

Peter John Chestna

Ellen L Dickau

Thomas J Bakerman

Jefferson A Kita

Mark B Hecker

Stephen M Glassman

Andres M Perez

Bj Herbison

Cora A Wong

Shadrack K Kilemba

Sean Gilhooly

In a system for facilitating distributed security and vulnerability testing of a software application, each development sandbox in a set of sandboxes receives a portion of the entire application, and the received portion may be tested based on an application-level security policy to obtain a pass/fail result. The portion of the application corresponding to a certain sandbox may be modified and rescanned (i.e., retested) until the modifications, i.e., development achieves functional and quality requirements, and a pass result is obtained. Thereafter, the scan results are promoted to a policy sandbox, where a compliance result for the entire software application can be obtained based on, at least in part, the promoted results. Other sandboxes may also perform their respective pass/fail testing using the promoted results, thus minimizing the need for synchronizing the code changes in different sandboxes before testing for security policy in any sandbox and/or during application-level scanning.

System and method for implementing application policies among development environments

Efficient development of conventional web applications suggests extensive and thorough knowledge of web page delivery technologies such as HTML, Java, and JSPs. A rendering framework to define the static, cosmetic, 'window dressing' type of content, replicated across multiple pages, in a single JSP template file which can then incorporate or include the dynamic, active content from other files, mitigates development inefficiencies. Such a rendering framework represents each screen output page by a file including the active content, while avoiding replication of the static content. Such inclusions may be nested in a hierarchical manner to enumerate the static content in one file and allow a web application to include active content according to a hierarchical inheritance. Metadata components, such as XML files, include the active content according to a predetermined declarative syntax, thereby facilitating implementation, which the framework then interprets into a resulting output page such as a JSP page.

System and method for a page rendering framework

A storage management system for managing storage resources of a plurality of computer devices in a computer network includes a plurality of management agents, each of which is installed in a corresponding one of the plurality of computer devices, and each of which is configured to compile storage information of storage resources accessible by the corresponding computer device to create a first set of compiled storage information, and a storage manager installed in the server. The storage manager is configured to collect the first set of compiled storage information from each of the management agents and to further compile the first sets of storage information received to create a second set of compiled storage information. The storage management system further includes a user interface operatively coupled to the server manager to allow a user to access the second set of compiled storage information.

Method and apparatus for providing data storage management

Growing community of inventors

Auburn, MA, United States of America

Peter John Chestna