Patent ID: 9032530
Filing Date: 2015-05-12
Classification: G06F

Abstract:
1. A system comprising: a first processor and memory configured to initiate executable operations comprising: determining an order in which client side workflows are intended to be implemented by the computer program by performing a static analysis of client side code of a computer program; based on the static analysis, generating a virtual patch configured to, when executed by the first processor or a second processor, perform executable operations comprising: tracking web service calls from a client to the computer program; determining whether the order of the web service calls from the client to the computer program correlate to the order in which client side workflows are intended to be implemented by the computer program; and responsive to determining that the order of the web service calls from the client to the computer program do not correlate to the order in which client side workflows are intended to be implemented by the computer program, generating an alert indicating that the web service calls from the client do not correlate to the order in which client side workflows are intended to be implemented by the computer program; and configuring the virtual patch to be applied to a processing system hosting the computer program and applying the patch to the processing system hosting the computer program; identifying a safe set of candidates of the client side workflows; and automatically synthesizing metadata that records sensitive execution paths and including the metadata in the virtual patch.