Snowflake Inc.

Rishabh Gupta

Ryan Charles Quistorff

Hrushikesh Shrinivas Paralikar

Benoit Dageville

Subramanian Muralidhar

Damien Carru

Unmesh Jagtap

Pui Kei Johnston Chu

Iulia Ion

Jake Tsuyemura

Nihar Pasala

James G Pan

James Pan

Sasha Leila Ronaghi

An anti-abuse scanning system and method for an application deployment platform is provided. In some examples, when a provider submits a new application package, a scan scheduler periodically polls for and detects the new submission. An anti-abuse scan service parses the installer script to determine dependencies between a primary application source code scan, and secondary container image scans. The primary and secondary scans are queued by writing records to status tables. A scan manager polls the tables, detects pending scans, and invokes scanner services to analyze the application files and container images based on configured rules. An image service extracts and uploads container images. The anti-abuse scan service aggregates the primary and secondary scan results to determine an overall verdict for the application package. In some examples, the verdict can be an automatic approval, automatic rejection, or trigger a manual review.

Static analysis correlation scanners

An anti-abuse system is provided for a data-platform. An anti-abuse scanner of the data-platform detects a creation of an application package by a provider of content to the data platform where the application package includes a set of files for deployment on the data platform. The anti-abuse scanner performs a review o the set of files to detect malicious content where the review is based on a set of analysis rules and generates a deployment decision for the application package based on a result of the review.

Application trust framework

An anti-abuse system is provided for a data-platform. An anti-abuse scanner of the data-platform detects a creation of an application package by a provider of content to the data platform where the application package includes a set of files for deployment on the data platform. The anti-abuse scanner performs a review of the set of files to detect malicious content where the review is based on a set of analysis rules and generates a deployment decision for the application package based on a result of the review.

Growing community of inventors

San Francisco, CA, United States of America

Rishabh Gupta