公开(公告)号：US08176464B2

公开(公告)日：2012-05-08

申请号：US12317708

申请日：2008-12-23

Applicant: Maneesh Kumar Ponnath

Inventor： Maneesh Kumar Ponnath

IPC: G06F9/44 ,  G06F11/00 ,  G06F3/00

CPC classification number: G06F21/54 ,  G06F8/20

Abstract: A framework for securing a source code base during the development phase of a software development lifecycle is provided. The framework includes an aspect package module and a validator package module. The aspect package module integrates security routines into the source code base. The aspect package module includes a custom interface module and a validator aspect module. The custom interface module includes a function declaration, wherein the custom interface module is implemented by at least one class of the one or more classes. The validator aspect module includes a controller code for controlling the flow of the execution, based on the context for the security validation of the at least one class, wherein one or more security routine integration points are defined in the at least one class. The validator package module validates the at least one class, based on the defined context, by using one or more validation classes.

Abstract translation: 提供了在软件开发生命周期的开发阶段保护源代码库的框架。 该框架包括一个方面包模块和一个验证器包模块。 Aspect包模块将安全例程集成到源代码库中。 该方面包模块包括自定义界面模块和验证器方面模块。 定制界面模块包括一个功能声明，其中定制界面模块由一个或多个类的至少一个类来实现。 验证器方面模块包括用于基于用于至少一个类的安全验证的上下文控制执行流程的控制器代码，其中在至少一个类中定义一个或多个安全程序集成点。 验证程序包模块通过使用一个或多个验证类，基于定义的上下文来验证至少一个类。

公开(公告)号：US20090183137A1

公开(公告)日：2009-07-16

申请号：US12317708

申请日：2008-12-23

Applicant: Maneesh Kumar Ponnath

Inventor： Maneesh Kumar Ponnath

IPC: G06F9/44

CPC classification number: G06F21/54 ,  G06F8/20

Abstract: A framework for securing a source code base during the development phase of a software development lifecycle is provided. The framework includes an aspect package module and a validator package module. The aspect package module integrates security routines into the source code base. The aspect package module includes a custom interface module and a validator aspect module. The custom interface module includes a function declaration, wherein the custom interface module is implemented by at least one class of the one or more classes. The validator aspect module includes a controller code for controlling the flow of the execution, based on the context for the security validation of the at least one class, wherein one or more security routine integration points are defined in the at least one class. The validator package module validates the at least one class, based on the defined context, by using one or more validation classes.

Abstract translation: 提供了在软件开发生命周期的开发阶段保护源代码库的框架。 该框架包括一个方面包模块和一个验证器包模块。 Aspect包模块将安全例程集成到源代码库中。 该方面包模块包括自定义界面模块和验证器方面模块。 定制界面模块包括一个功能声明，其中定制界面模块由一个或多个类的至少一个类来实现。 验证器方面模块包括用于基于用于至少一个类的安全验证的上下文控制执行流程的控制器代码，其中在至少一个类中定义一个或多个安全程序集成点。 验证程序包模块通过使用一个或多个验证类，基于定义的上下文来验证至少一个类。