US 11,899,780 B2
Automatic assessment of API service security standing with API reputation scoring
Hendrikus G. P. Bosch, Aalsmeer (NL); Alessandro Duminuco, Milan (IT); Sape Jurriën Mullender, Amsterdam (NL); and Jaffar Alaoui, London (GB)
Assigned to CISCO TECHNOLOGY, INC., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Apr. 9, 2021, as Appl. No. 17/226,304.
Claims priority of provisional application 63/136,731, filed on Jan. 13, 2021.
Prior Publication US 2022/0222335 A1, Jul. 14, 2022
Int. Cl. G06F 21/57 (2013.01); G06F 21/52 (2013.01); G06F 9/54 (2006.01)
CPC G06F 21/52 (2013.01) [G06F 9/544 (2013.01); G06F 2221/031 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
one or more processors;
one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the system to perform operations comprising:
identifying an API service called by an application based on information provided by an agent embedded within the application, wherein the agent comprises a software module embedded within the application and the agent is configured to interact with data plane traffic between the application and the API service;
collecting telemetry associated with the API service, the telemetry collected from one or more telemetry sources and indicating any deficiencies in the API service;
generating a reputation score for the API service based on analysis of the collected telemetry; and
transmitting the reputation score to at least one of the following:
the agent embedded within the application, wherein the reputation score is associated with at least one policy having at least one policy action, and wherein the reputation score is operable to be used by the agent to invoke the at least one policy action relating to use of the API service by the application; or
a continuous integration/continuous delivery (CI/CD) pipeline associated with the application, wherein the reputation score is operable to be used by the CI/CD pipeline to determine deployment policies of the application.