Patent ID: 11966462
Assignee: DROPBOX, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 15:
16. A method comprising:
identifying, by a computing system, a third-party dependency to be added to a codebase, the third-party dependency hosted on a third-party server;
downloading, by the computing system, the third-party dependency within a secure runtime environment;
generating, by the computing system, a signature value for the third-party dependency;
comparing, by the computing system, the signature value to a database of signature values of approved third-party dependencies;
upon determining, by the computing system, that the signature value does not correspond to any signature values of the approved third-party dependencies, executing the third-party dependency with a replica of the codebase within the secure runtime environment;
executing, by the computing system, the codebase in a second secure runtime environment;
monitoring, by the computing system, the execution of the third-party dependency within the secure runtime environment to identify whether the third-party dependency violates a security rule, the monitoring comprising:
identifying a first set of metadata generated by the secure runtime environment, wherein the first set of metadata comprises a first set of calls made during execution of the third-party dependency with the replica of the codebase;
identifying a second set of metadata generated by the second secure runtime environment, wherein the second set of metadata comprises a second set of calls made during execution of the codebase without the third-party dependency, and
comparing the first set of metadata to the second set of metadata to determine whether the third-party dependency triggered a call that violates the security rule; and

upon determining, by the computing system, that the third-party dependency does not violate the security rule, adding the signature value to the database of signature values of approved third-party dependencies.