| CPC G06F 8/60 (2013.01) [G06F 21/60 (2013.01)] | 20 Claims |

|
1. An apparatus comprising:
at least one processing device comprising a processor coupled to a memory;
the at least one processing device being configured:
to monitor data exchanged with a given piece of software, the monitored data comprising at least one of one or more requests sent from one or more clients to the given piece of software and one or more responses sent from the given piece of software to the one or more clients;
to generate at least one data structure characterizing whether one or more designated types of data are included in the monitored data, the generated at least one data structure comprising one or more entries, a given one of the one or more entries comprising information characterizing at least one of the one or more requests and the one or more responses in which at least one of the one or more designated types of data is determined to be included;
to evaluate a risk of exposure of the one or more designated types of data by parsing at least a portion of the generated at least one data structure; and
to control deployment of the given piece of software in a given operating environment based at least in part on the evaluated risk of exposure of the one or more designated types of data.
|