Patents by Inventor Roxana Bradescu

Roxana Bradescu has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Tailored security configuration of least-privilege applications
    Patent number: 11336680
    Abstract: Techniques for tailoring security configurations for least-privilege applications are provided. In one technique, multiple software artifacts associated with a software application are identified. For each software artifact, a call graph is generated, the call graph is added to a set of call graphs, and a set of dependencies for the software artifact is detected. The set of call graphs are combined to generate a merged call graph. One or more portions of the merged call graph are pruned to generate a pruned call graph. Annotation data is stored that associates elements in the pruned call graph with the set of dependencies for each software artifact. Based on the annotation data, reachable dependencies are identified. Based on the reachable dependencies, a set of security policies is generated for the software application.
    Type: Grant
    Filed: March 5, 2020
    Date of Patent: May 17, 2022
    Assignee: Oracle International Corporation
    Inventors: Hugo Guiroux, Christopher Ferreira, Matthias Neugschwandtner, Roxana Bradescu
  • TAILORED SECURITY CONFIGURATION OF LEAST-PRIVILEGE APPLICATIONS
    Publication number: 20210281597
    Abstract: Techniques for tailoring security configurations for least-privilege applications are provided. In one technique, multiple software artifacts associated with a software application are identified. For each software artifact, a call graph is generated, the call graph is added to a set of call graphs, and a set of dependencies for the software artifact is detected. The set of call graphs are combined to generate a merged call graph. One or more portions of the merged call graph are pruned to generate a pruned call graph. Annotation data is stored that associates elements in the pruned call graph with the set of dependencies for each software artifact. Based on the annotation data, reachable dependencies are identified. Based on the reachable dependencies, a set of security policies is generated for the software application.
    Type: Application
    Filed: March 5, 2020
    Publication date: September 9, 2021
    Inventors: Hugo Guiroux, Christopher Ferreira, Matthias Neugschwandtner, Roxana Bradescu