Patent ID: 11886599
Assignee: DYNATRACE LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 15:
16. A computer-implemented system for identifying a security vulnerability in an application executing on a host computing device in a distributed computing environment, comprising:
a processor; and
a storage medium having computer program instructions stored thereon, when executed by the processor, implement:
a source sensor instrumented in a request handling method of the application and configured to register input data in a security status repository on the host computing device, where the input data is received via the request handling method from a source external to the host computing device;
a sanitization sensor instrumented in a data sanitization method within the application and configured to log sanitization of the input data in the security status repository, where the logging of the sanitization is in response to execution of a data sanitization method;
a sink sensor instrumented in a sink call made by the application and configured to log a sink call made by the application in the security status repository, where the logging of the sink call is in response to execution of the sink call and the execution of the sink call uses at least a portion of the input data; and
an agent deployed in an execution environment shared with the application, where the agent determines whether parameter values for the sink call were sanitized using data in the security status repository and identifies a security vulnerability in the application in response to a determination that at least a portion of one parameter value for the sink call was not sanitized.