CODE ANALYSIS TOOL FOR RECOMMENDING ENCRYPTION OF DATA WITHOUT AFFECTING PROGRAM SEMANTICS

Systems, methods and computer program products are described that analyze the code of an application and, based on the analysis, identify whether data elements (e.g., columns) referenced by the code can be encrypted, and for those data elements that can be encrypted, recommend an encryption scheme. The recommended encryption scheme for a given data element may be the highest level of encryption that can be applied thereto without affecting the semantics of the application code. The output generated based on the analysis may not only include a mapping of each data element to a recommended encryption scheme, but may also include an explanation of why each recommendation was made for each data element. Such explanation may include, for example, an identification of the application code that gave rise to the recommendation for each data element. 本文中描述了系统、方法和计算机程序产品，其分析应用的代码，基于该分析来标识由代码所引用的数据元素(例如，列)是否可以被加密，并且对于可以被加密的那些数据元素，推荐加密方案。针对给定数据元素推荐的加密方案可以是能够应用于其而不影响应用代码的语义的最高级别的加密。基于分析生成的输出可能不仅包括每个数据元素到所推荐的加密方案的映射，而且还可以包