Monitoring accesses to computer source code

• US 9,621,677 B1
• Filed: 11/20/2015
• Issued: 04/11/2017
• Est. Priority Date: 11/20/2015
• Status: Active Grant

• Current Assignee: AirBNB Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Bradley, Lisa M., Carlson, Christina R., Freed, Andrew R., Henderson, Roderick C.
• Primary Examiner(s): Nguyen, Angela
• Application Number:
  US14/947,478
• Time in Patent Office: 508 Days
• Field of Search: None
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: H04L 47/808 User-type aware
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Aspects include monitoring accesses to computer source code. A method includes detecting an access, by a user, to a source code repository. It is determined whether the access is consistent with a history of accesses by the user to the source code repository. Based on determining that the access is not consistent with the history of accesses by the user, the access is analyzed for a reason for the user to perform the access. The analyzing is based on information about the user and information about the access. A notification of the access is generated based on the analyzing resulting in an absence of a reason for the user to perform the access.

Claims

1. A method comprising;

detecting, by a processor, actions by a user while the user is accessing a source code file in a source code repository, at least a subset of the actions selected from the group consisting of mouse clicks and keyboard activity, the processor remote from the user;

determining, by the processor, whether the access is consistent with a history of accesses by the user to the source code repository, the history of accesses comprising portions of source code files accessed by the user, and viewing and editing times corresponding to the portions of source code files; and

based on determining that the access is not consistent with the history of accesses by the user;

analyzing the access for a reason for the user to perform the access, the analyzing based on information about the user and information about the access, the information about the user including work tasks assigned to the user; and

generating a notification of the access based on the analyzing resulting in an absence of a reason for the user to perform the access.

2. The method of claim 1, further comprising updating the history of accesses with the information about the access based on determining that the access is consistent with the history of accesses by the user.

3. The method of claim 1 further comprising updating the history of accesses with information about the access based on the analyzing detecting a reason for the user to perform the access.

4. The method of claim 1, wherein the generating a notification of the access is further based on the analyzing detecting a reason for the user to perform the access.

5. The method of claim 1, wherein the user is prevented from performing the access based on the analyzing detecting an absence of a reason for the user to perform the access.

6. The method of claim 1, wherein the information about the user includes a role of the user and the analyzing is further based on expected source code repository accesses associated with the role.

7. The method of claim 1, wherein the information about the access includes actions taken by the user during the access.

8. The method of claim 1, wherein the information about the access includes one or both of a length of time of the access and a time of day of the access.

9. The method of claim 1, wherein the analyzing is further based on information about defects associated with source code in the source code repository.

10. A system comprising:

a memory having computer readable instructions; and

one or more processors for executing the computer readable instructions, the computer readable instructions comprising;

detecting, by a processor, actions by a user while the user is accessing a source code file in a source code repository, at least a subset of the actions selected from the group consisting of mouse clicks and keyboard activity, the processor remote from the user;

determining, by the processor, whether the access is consistent with a history of accesses by the user to the source code repository, the history of accesses comprising portions of source code files accessed by the user, and viewing and editing times corresponding to the portions of source code files; and

based on determining that the access is not consistent with the history of accesses by the user;

analyzing the access for a reason for the user to perform the access, the analyzing based on information about the user and information about the access, the information about the user including work tasks assigned to the user; and

generating a notification of the access based on the analyzing resulting in an absence of a reason for the user to perform the access.

11. The system of claim 10, wherein the computer readable instructions further comprise updating the history of accesses with the information about the access based on determining that the access is consistent with the history of accesses by the user.

12. The system of claim 10, wherein the computer readable instructions further comprise updating the history of accesses with information about the access based on the analyzing detecting a reason for the user to perform the access.

13. The system of claim 10, wherein the generating a notification of the access is further based on the analyzing detecting a reason for the user to perform the access.

14. The system of claim 10, wherein the user is prevented from performing the access based on the analyzing detecting an absence of a reason for the user to perform the access.

15. The system of claim 10, wherein the information about the user includes a role of the user and the analyzing is further based on expected source code repository accesses associated with the role.

16. The system of claim 10, wherein the information about the access includes actions taken by the user during the access.

17. A computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform:

detecting, by the processor, actions by a user while the user is accessing a source code file in a source code repository, at least a subset of the actions selected from the group consisting of mouse clicks and keyboard activity, the processor remote from the user;

determining, by the processor, whether the access is consistent with a history of accesses by the user to the source code repository, the history of accesses comprising portions of source code files accessed by the user, and viewing and editing times corresponding to the portions of source code files; and

based on determining that the access is not consistent with the history of accesses by the user;

analyzing the access for a reason for the user to perform the access, the analyzing based on information about the user and information about the access, the information about the user including work tasks assigned to the user; and

generating a notification of the access based on the analyzing resulting in an absence of a reason for the user to perform the access.

18. The computer program product of claim 17, wherein the program instructions further cause the processor to perform:

updating the history of accesses with the information about the access based on determining that the access is consistent with the history of accesses by the user; and

updating the history of accesses with information about the access based on the analyzing detecting a reason for the user to perform the access.