Application Security Coverage Index via Segmented Entry Point Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security assessment methods for enterprise applications are resource-intensive and fail to accurately estimate security coverage, necessitating a more efficient approach to identify security threat entry points and compute a coverage index for improved security analysis.
Innovation Solution
A method and device that receive application entry data from multiple testing sources, analyze it to identify security threat entry points, and compute a coverage index value to generate a recommendation report on security coverage, enabling targeted security assessments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If comprehensive security testing (SAST, DAST, functionality tests, web services testing) is performed on all entry points, then security coverage is improved, but time and resource consumption increase significantly
Solution Approach 1:
The patent segments the security testing process by dividing entry points into different categories (UI entry points, web service entry points, database entry points) and applies different testing strategies to each segment. This allows comprehensive security coverage while reducing overall testing time and resources by not applying the same level of testing intensity to all entry points uniformly.
Solution Approach 2:
The patent implements local quality by computing specific coverage index values for different types of entry points (UI coverage index, web service coverage index, database coverage index) rather than treating all entry points equally. This allows targeted security assessment with appropriate testing depth for each specific entry point type, improving efficiency while maintaining necessary security coverage.
2Measurement precision
If uniform security standards are applied to all enterprise applications, then security assessment consistency is improved, but the assessment fails to estimate actual security coverage accurately
Solution Approach 1:
The patent changes the parameters of security assessment by computing quantitative coverage index values based on the number of entry points and security threats identified in each category. This transforms the assessment from a uniform qualitative approach to a differentiated quantitative approach, improving measurement precision while managing complexity through standardized calculation methods.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present disclosure disclose a method and a device for evaluating security assessment of an application. The method comprises receiving application entry data associated with a plurality of entry points of the application. Also, the method comprises identifying at least one security threat entry point based on the application entry data. Further, the method comprises computing a coverage index value based on the application entry data and the at least one security threat entry point and generating a recommendation report indicating security coverage of the application based on the coverage index value.