Patent ID: 11943261
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 11:
12. A non-transitory computer-readable storage medium storing executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:
store, in a database, a plurality of security policies for a mainframe application, wherein the plurality of security policies comprises:
a first set of security policies that control access to operating system resources;
a second set of security policies that control access to database system resources;

obtain a request to analyze the mainframe application for compliance with a security assurance; and
a third set of security policies that control access to a service frontend;

determine, based on the security assurance, a reference policy;
determine a first propositional logic expression based on the plurality of security policies;
determine a second propositional logic expression based on the reference policy;
determine an equivalent result that indicates whether the first propositional logic expression is equally or less permissive than the second propositional logic expression; and
provide an indication of whether the security assurance is satisfied by the plurality of security policies.