Cross-Cloud Call Detection in Code Compilation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Different computing services have distinct security and privacy requirements, leading to accidental integration of functions that compromise security and privacy, necessitating a method to detect and prevent cross-cloud calls during code compilation.
Innovation Solution
A system and method for cross-cloud call detection, utilizing an analyzer that scans code for instructions calling resources, compares resource names and values against a list of prohibited resources, and halts conversion of source code if incompatible, generating errors or suggestions for correction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If code conversion/compilation is performed without cross-cloud call detection, then productivity is improved (faster compilation), but security and privacy requirements are compromised due to accidental integration of incompatible functions
Solution Approach 1:
The patent applies preliminary action by detecting and analyzing API calls during the code compilation process before the code is executed. The system proactively identifies incompatible cross-cloud calls by comparing resource names and values against a list of prohibited resources, and halts the conversion process before incompatible code is generated, thus preventing security issues before they occur while maintaining compilation efficiency
Solution Approach 2:
The patent introduces an intermediary detection system that acts as a mediator between the source code and the compilation process. This intermediary component analyzes API calls, determines compatibility with target services, and controls whether conversion should proceed, serving as a security gate without significantly impacting the overall compilation workflow
2Reliability
If comprehensive resource detection and verification is performed during code compilation, then security compliance is improved, but device complexity increases due to additional analysis mechanisms
Solution Approach 1:
The patent applies segmentation by dividing the detection process into distinct functional components: detecting API calls in source code, determining resource names and values, comparing against prohibited resource lists, and halting conversion when incompatibility is found. This modular approach makes the complex security verification process more manageable and maintainable
Solution Approach 2:
The patent uses copying by maintaining a list of prohibited resources that can be referenced during compilation. Instead of implementing complex verification logic for each possible resource, the system copies and references a predefined list of incompatible resources, simplifying the detection mechanism while maintaining comprehensive security coverage
Data Source
AI summary
Methods and systems are described for cross-cloud call detection. The system may include detecting an instruction configured to call a resource. The instruction may include a name indicative of the resource and one or more values. The resource is configured to construct code using the one or more values. The system may determine the resource is incompatible with a service based on at least the name and the one or more values of the instruction. A conversion of source code is halted when the resource is incompatible with the service.