Patent ID: 9223961
Filing Date: 2015-12-29
Classification: G06F

Abstract:
1. A computer-implemented method for performing security analyses of applications configured for cloud-based platforms, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying an online platform that hosts an online service and that is capable of hosting a plurality of third-party applications integrated with the online service and configured to operate on the online platform, wherein the online service hosts and/or processes data via one or more cloud-based applications; identifying, by a security system separate from the online service, at least one third-party application by identifying user-facing content within the online service that references the third-party application, the third-party application being: retrieving, from the online service by the security system, metadata describing: in response to determining that the third-party application is separate from the online platform, performing, by the security system, a security analysis of the third-party application instead of the online service that determines a most probable classification of the third-party application, based at least in part on the metadata describing at least one characteristic of the third-party application, the interaction of the third-party application with the online service, and the internet resource provided via the canvas page, and flagging the third-party application as malicious based on the security analysis.