Patent ID: 8117640
Filing Date: 2012-02-14
Classification: H04L

Abstract:
1. A system for analyzing software application security policies in a heterogeneous environment, comprising: an aggregation module in communication with an external computing device, the external computing device in communication with at least two functionally different software applications, each of the at least two functionally different software applications having an application security policy, each application security policy forming at least part of a local policy that specifies at least in part whether a particular transaction associated with a particular application can be accessed by a particular subject; the aggregation module configured to retrieve the at least two application security policies from a virtual policy store, a physical policy store, or any combination thereof; an indexing engine in communication with the aggregation module, the indexing engine configured to generate an indexed and optimized application security policy utilizing the at least two application security policies; a computing device configured to receive one or more queries; a query preprocessor module configured to decompose the one or more queries; and an analysis engine in communication with the query preprocessor module, the analysis engine configured to process the one or more decomposed queries utilizing the indexed and optimized application security policy.