公开(公告)号：US20170098086A1

公开(公告)日：2017-04-06

申请号：US14876354

申请日：2015-10-06

Applicant: NETFLIX, INC.

Inventor： Andy Hoernecke ,  Jason Chan

IPC: G06F21/57

CPC classification number: G06F21/577 ,  G06F11/3688 ,  G06Q10/0635 ,  G06Q10/10

Abstract: Provided herein are systems and methods for monitoring and assessing the security and risk presented by applications deployed in a complex computing environment. An exemplary application security system includes a server having a processing device in communication with storage systems, computing devices executing application instances configured to receive and transmit information over a network, and a security testing system including a first test module that is associated with a first application, which is associated with one or more of the application instances. The processing device of the server retrieves information about the first application, including current dependency information of the first application, calculates a security risk score for the first application based on the information, determines a security priority level associated with first application, and associates the security priority level of the first application with the first application in a database of application security information.

公开(公告)号：US20180004960A1

公开(公告)日：2018-01-04

申请号：US15706408

申请日：2017-09-15

Applicant: NetFlix, Inc.

Inventor： Andy Hoernecke ,  Jason Chan

IPC: G06F21/57 ,  G06F11/36 ,  G06Q10/06 ,  G06Q10/10

CPC classification number: G06F21/577 ,  G06F11/3688 ,  G06Q10/0635 ,  G06Q10/10

Abstract: Provided herein are systems and methods for monitoring and assessing the security and risk presented by applications deployed in a complex computing environment. An exemplary application security system an application security server having a processing device in communication with one or more storage systems and includes a security testing system with a plurality of security test modules. The test modules include a first module associated with a first application associated with one or more application instances configured to receive and transmit over a network. The processing device calculates a security risk score for the first application based on information about the first application, determines a security priority level associated with first application, the security priority level of the first application being based on the security risk score for the first application, and associates the security priority level of the first application with the first application in a database of application security information.

公开(公告)号：US10262145B2

公开(公告)日：2019-04-16

申请号：US15706408

申请日：2017-09-15

Applicant: NetFlix, Inc.

Inventor： Andy Hoernecke ,  Jason Chan

IPC: H04L29/06 ,  G06F21/57 ,  G06F11/36 ,  G06Q10/06 ,  G06Q10/10

Abstract: Provided herein are systems and methods for monitoring and assessing the security and risk presented by applications deployed in a complex computing environment. An exemplary application security system an application security server having a processing device in communication with one or more storage systems and includes a security testing system with a plurality of security test modules. The test modules include a first module associated with a first application associated with one or more application instances configured to receive and transmit over a network. The processing device calculates a security risk score for the first application based on information about the first application, determines a security priority level associated with first application, the security priority level of the first application being based on the security risk score for the first application, and associates the security priority level of the first application with the first application in a database of application security information.

公开(公告)号：US09767291B2

公开(公告)日：2017-09-19

申请号：US14876354

申请日：2015-10-06

Applicant: NETFLIX, INC.

Inventor： Andy Hoernecke ,  Jason Chan

IPC: H04L29/06 ,  G06F21/57 ,  G06F11/36 ,  G06Q10/06 ,  G06Q10/10

CPC classification number: G06F21/577 ,  G06F11/3688 ,  G06Q10/0635 ,  G06Q10/10

Abstract: Provided herein are systems and methods for monitoring and assessing the security and risk presented by applications deployed in a complex computing environment. An exemplary application security system includes a server having a processing device in communication with storage systems, computing devices executing application instances configured to receive and transmit information over a network, and a security testing system including a first test module that is associated with a first application, which is associated with one or more of the application instances. The processing device of the server retrieves information about the first application, including current dependency information of the first application, calculates a security risk score for the first application based on the information, determines a security priority level associated with first application, and associates the security priority level of the first application with the first application in a database of application security information.