×

Method and system for scrubbing information from heap dumps

  • US 8,930,327 B2
  • Filed: 04/28/2011
  • Issued: 01/06/2015
  • Est. Priority Date: 05/04/2010
  • Status: Active Grant
First Claim
Patent Images

1. A machine implemented method comprising:

  • analyzing, by a host system a heap dump to determine class dependencies, the host system including at least a processor system having at least one processor, and a memory system having at least one machine readable medium that stores contents of a heap dump, including content that was stored within at least a collection of memory cells used by a function that had been called while an application is running and was dumped into the machine readable medium;

    creating a map, by the processor system, of the heap dump, mapping the class dependencies, by mapping which classes depend on which classes;

    locating and erasing, by the host system, sensitive information, wherein the steps of locating and erasing sensitive information includes at least determiningwhether a piece of information originated from a particular class that is used for storing confidential information, andwhether an object associated with the piece of information is of a particular type, andif the information originated from that particular class and the object is of the particular type, erasing the information in case the information is sensitive information;

    storing, by the host system, into the memory system information that remains after the erasing;

    rebuilding, by the host system, the content of the heap dump by at least reconstructing the class dependencies without the sensitive information, therein restoring dependencies of classes on other classes;

    a class dependency being an object from which another object derives functionality, the heap dump, after being rebuilt, includes the class dependencies, the reconstructing of the class dependencies including re-establishing references in objects to other objects that are relied on for functionality;

    the heap dump data including at leastan instance dump portion, which is a portion of the heap dump data that includes at least an address of an object of interest, information related to a state of the object of interest that the object of interest was in just prior to the dump, and address of objects that referenced the object of interest, anda class dump portion, which is a portion of the heap dump that identifies objects created as specified by a particular class, the class dump includes at least address allocated to a class and a name of the class.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×