Cloud Agent for Autonomous Security Testing of Non-API Cloud-Native Apps
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Standard Dynamic Application Security Testing (DAST) solutions are limited in scanning cloud-native applications that do not use internet API protocols, and they heavily rely on manual or semi-manual configurations, making it difficult to assess applications without accessible API endpoints.
Innovation Solution
A software-based solution that uses a manager Lambda function to scan cloud-platform based applications, generate a testing profile, and perform security testing operations autonomously, without relying on network-accessible API endpoints, by interacting with the cloud-platform environment to collect metadata and logs, and programmatically configure security testing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If standard DAST solutions are used to scan applications, then API endpoints can be assessed, but cloud-native applications without network-accessible API endpoints cannot be scanned
Solution Approach 1:
The patent introduces a cloud agent as an intermediary component deployed within the cloud-native application's runtime environment. This cloud agent acts as a mediator between the security testing system and the application code, enabling the system to access and test application logic that would otherwise be inaccessible through traditional network-based scanning methods. The cloud agent collects metadata, exercise data, and security vulnerability information from within the application's execution context.
2Reliability
If manual or semi-manual configurations are used for security testing, then testing can be performed, but the process is complex and time-consuming
Solution Approach 1:
The system implements self-service automation where the cloud agent automatically discovers the cloud-native application's structure, metadata, and execution context without requiring manual configuration. The system autonomously generates security testing profiles based on collected metadata, automatically configures testing parameters, and executes security tests without human intervention. This eliminates the need for manual or semi-manual configuration processes.
3Reliability
If standard DAST solutions are used, then externally accessible applications can be tested, but applications not connected to the network cannot be assessed
Solution Approach 1:
The patent transitions the security testing approach from an external network-based dimension to an internal runtime environment dimension. Instead of scanning applications through network protocols from outside the application's execution environment, the system deploys a cloud agent within the application's runtime context, enabling testing from the inside out. This dimensional shift allows access to application logic, data flows, and execution context that are invisible to external scanners.
Data Source
AI summary
In one aspect, a method includes the step of providing a cloud-platform based application. The method includes the step of providing a manager Lambda function. With the manager Lambda function, the method scans the cloud-platform based application, and obtains a set of metadata about the cloud-platform based application. The method includes the step of using the set of metadata. The method includes the step of generating a testing profile in a templated format based on a type of application of the cloud-platform based application. The method includes the step of using the testing profile to exercise the cloud-platform based application with one or more security testing operations.