Vulnerability notification for live applications

US10235527B1 · kind B1 · utility

Inventors

• Michael Dalessio · Madison, US
• Justin Smith · Loudoun Valley Estates, US
• John Shahid · Brooklyn, US
• James Wen · Edison, US
• David Jahn · Brooklyn, US
• David E. Goddard · New York, US
• Forest Eckhardt · Brooklyn, US
• Mark W. Kropf · Brooklyn, US
• James Thomas Bayer · Palo Alto, US
• Brandon Shroyer · New York, US
• Kelly Harold Patrick Gerritz · New York, US
• Samuel E. Smith · New York, US
• Gabriel Ramirez · Riverdale, US
• Justin Tyler Archie · Denver, US
• Amin Jamali · Hoboken, US
• Daniel George Rosen · Plainview, US

Key dates

• Filing date: Aug 11, 2016
• Grant date: Mar 19, 2019
• Expiry date: Jan 19, 2037

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/033
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Methods, systems, and computer-readable media for monitoring states of application packages deployed on a cloud-based application deployment platform. A notification service retrieves a copy of a deployed application package from the cloud-based deployment platform, and determines libraries of the application package. The notification service can then determine security vulnerabilities in the libraries, and provide notifications on the vulnerabilities of the application package to a user or developer.