Patent ID: 9336396
Filing Date: 2016-05-10
CPC Classification: G06F,H04L

Claim Text:
1. A system for generating a security policy for protecting an application-layer entity, comprising: a processing unit; and a memory coupled to the processing unit the memory containing instructions that, when executed by the processing unit, configures the system to operate: a role specific security sitemap generator configured to generate a security sitemap of a protected application-layer entity, wherein the role specific security sitemap generator is configured to generate a security sitemap for each different type of role selectable from a plurality of defined roles in which the application-layer entity can operate, a first data repository configured to save at least the generated role specific security sitemap, wherein the first data repository is coupled to the role specific security sitemap generator; a policy builder configured to generate a security policy corresponding to the selected defined role of the protected application-layer entity using at least the generated role specific security sitemap, wherein the security policy includes a plurality of enforcement rules for at least one of a resource, a group of resources, and a client-side input parameter of at least a portion of the protected application-layer entity; and a second data repository configured to save the security policy, wherein the second data repository is connected to the policy builder.