Hewlett-packard Development Company, L.P.

Hewlett Packard Enterprise Development LP

Netsuite Inc.

Micro Focus Lcc

Fortify Software, Inc.

Entit Software LLC

Sean Patrick Fay

Brian V Chess

Arthur Do

Roger Thornton

Philip Edward Hamer

Theodore Ray Rice

Iftach Ragoler

Xi (Scott) Liu

Ayee Kannan Goundan

John Cherniavsky

Russell Andrew Spitler

Matias Madou

Prajakta Subbash Jagdale

Prajakta Subbash Jagdate

Methods, systems, and other embodiments for protecting a shared resource in a data processing system are described herein. In one embodiment, when responding to a request that requires use of the shared resource, determine whether a previously established sleep period for the shared resource has expired. If so, determine a health status of the shared resource based on one or more of applying an asymptotic transform to a percentage of time that a processing unit is idle and applying a linear transform to a session count for the shared resource. Then, determine whether the health status is sufficient to permit responding to the request; and if not, (i) determining an appropriate sleep period for the shared resource, (ii) initiating a sleep state for the shared resource for a period substantially equal to the determined appropriate sleep period; and (iii) exiting the sleep state and responding to the request.

Shared resources control in a multi-tenant system

A non-transitory processor-readable medium stores code that represents instructions that, when executed at a processor, cause the processor to access an attack description; intercept a data set from an application via an application programming interface (API), where the intercepted data set is based on an attack data set and where the attack data set is used to test for a security vulnerability in the application; correlate, using a Hamming distance, the intercepted data set with the attack description using a correlation type identifier; and report the security vulnerability for the application in response to the intercepted data set based at least in part on a result of the correlation.

Application security testing

Systems, apparatuses, and methods for preventing the use of a shared resource (such as a database) by a user or group of users from causing other users to experience unsatisfactory or unreliable access to that resource or to related, impacted resources (such as a communications network or processor). In some embodiments, the invention is directed to systems, apparatuses, and methods that may be implemented in a multi-tenant system in order to prevent a single user or the users associated with an account from degrading the system performance experienced by other users, either by intentional or inadvertant misuse of a shared database, and to prevent an overload condition from causing the system or database to fail abruptly.

System and methods for implementing control of use of shared resource in a multi-tenant system

The present disclosure provides a system that includes a server hosting an application under test (AUT), an observer configured to monitor instructions executed by the AUT, and a computing device communicatively coupled to the AUT and the observer through a common communication channel. The computing device may be configured to send an application request to the AUT, wherein the application request is configured to expose a potential vulnerability of the AUT. The computing device may receive an application response from the AUT in accordance with the AUT's programming. The computing device may send a service request to the observer, and receive a service response from the observer that contains information corresponding to the instructions executed by the AUT due to the application request, information about the AUT, or information about a server hosting the AUT.

A method is disclosed for migrating a client domain involving identifying a user account entry in a client domain's password table, where the entry includes a user identifier and a first hashed password value, where the first hashed password value is derived from hashing a user password with a client domain hash algorithm. The first hashed password value is re-hashed using a multi-tenant system hash algorithm to obtain a second hashed password value. Another user account entry is created and stored in a multi-tenant system password table along with the second hashed password value and metadata from which the client domain hash algorithm can be determined.

System and method for importing heterogeneous hashed passwords

A computer readable medium includes executable instructions to analyze program instructions for security vulnerabilities. The executable instructions convert diverse program instruction formats to a common format. A system model is derived from the common format. A static analysis is performed on the system model to identify security vulnerabilities. Security vulnerabilities are then reported.

Apparatus and method for developing secure software

In one implementation, a tag is associated with a tainted value of an application and an output context of the application that is associated with output from the application that includes the tainted value is determined. A taint processing is a applied to the tainted value in response to the output of the tainted value, the taint processing is compatible with the output context.

Context-sensitive taint processing for application security

A taint processing applied to a tainted value of an application is identified and an output context of the application associated with output of the tainted value is determined. It is determined whether the taint processing is effective in mitigating a security vulnerability caused by the tainted value for the output context.

Context-sensitive taint analysis

A computer readable storage medium includes executable instructions to identify a memory operation in target source code. A set of constraints associated with the memory operation are developed. The constraints are converted into a Boolean expression. The Boolean expression is processed with a Boolean satisfiability engine to determine whether the memory operation is potentially unsafe.

Apparatus and method for analyzing source code using memory operation evaluation and boolean satisfiability

A computer readable storage medium includes executable instructions to identify a path in target source code. Constraints associated with the path are extracted. The constraints are converted to a Boolean expression. The Boolean expression is processed with a Boolean satisfiability engine to identify either a feasible path or an infeasible path. A feasible path is statically analyzed, while an infeasible path is not statically analyzed.

Apparatus and method for analyzing source code using path analysis and Boolean satisfiability

A computer readable medium includes executable instructions to analyze program instructions for security vulnerabilities. The executable instructions perform a security audit of program instructions. Based upon the security audit, sensors are inserted into the program instructions. The program instructions are executable and the sensors generate a stream of security events. The stream of security events is monitored and security performance results are reported.

Growing community of inventors

San Francisco, CA, United States of America

Sean Patrick Fay