Abstract: A system processes an API specification provided by a vendor to determine and classify the functions defined therein by CRUD operation type based on analysis of the function names. Classification of the function includes associating a bitmask corresponding to the class with the function name. The system then subscribes to an event stream including logged API function call events during a time window overlapping with a “blind spot” period of attack detection. The system analyzes incoming events to identify an associated resource and an API function call. The system classifies the function based on the determined function classes and performs a bitwise operation between bit values maintained for the identified resource that are indicative of resource state and the bitmask of the function class. If the resulting bit values indicate that the resource was both created and deleted during the time window, the system flags the resource as potentially involved in an attack.

Abstract: In one embodiment, during runtime use of a configurable application that is used by multiple service requesters, a configuration dependency manager is integrated in the configurable application to check a set of features for one of the service requesters. The method receives a service requester configuration for the set of features. A configuration dependency manager determines a set of dependencies for the set of features that have been configured by the service requester configuration and determines a developer's configuration for a plurality of features for the configurable application. Then, the configuration dependency manager analyzes the set of dependencies with corresponding dependencies in the developer's configuration to determine when an issue exists with the service requester configuration and provides a visualization of the set of features based on the analyzing the set of dependencies, wherein the issue is shown on the visualization.