Static and dynamic security analysis of apps for mobile devices
US-9811665-B1 · Nov 7, 2017 · US
US2017329701A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2017329701-A1 |
| Application number | US-201615207344-A |
| Country | US |
| Kind code | A1 |
| Filing date | Jul 11, 2016 |
| Priority date | May 16, 2016 |
| Publication date | Nov 16, 2017 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Various embodiments provide an automated testing analysis tool, termed a “pre-release analysis tool”, that tests applications for functional and nonfunctional requirements. In at least some embodiments, the pre-release analysis tool can perform both static analysis and dynamic analysis on an application. A report module can provide rich feedback, including actionable feedback, to an application developer in order to enable the developer to make their applications more secure, reliable, efficient, and performant. Actionable feedback can include feedback that suggests various remedial measures that an application developer may put in place in order to improve their applications. Application analysis can be performed in various different categories with actionable feedback provided in each. These different categories can include, by way of example and not limitation, application crashes, performance, security, usability, application statistics, code warnings, localization issues, and network issues.
Opening claim text (preview).
What is claimed is: 1 . A computer-implemented method for generating an application report, the method comprising: receiving an application for testing; performing static analysis on the application; performing dynamic analysis on the application by loading the application onto a plurality of physical devices and using an automated robot tester to test the application; and responsive to performing said static analysis and said dynamic analysis, generating a network-accessible, pre-release report that includes a plurality of categories including: a crash category that provides a crash investigation report associated with application crashes; a screenshot category that provides one or more screenshots of the application taken while the application was being tested; and a security category that provides information associated with vulnerability scans of the application while the application was being tested. 2 . The method of claim 1 , wherein the crash investigation report includes a report section that provides a visual summary of device testing on the plurality of physical devices including device model name, operating system version, and language. 3 . The method of claim 2 , wherein the visual summary of device testing includes a portion that can provide a description associated with a particular crash. 4 . The method of claim 1 , wherein the one or more screenshots are configured to describe problems that are detected. 5 . The method of claim 1 , wherein the one or more screenshots are configured to describe problems that are detected during an application crash. 6 . The method of claim 1 , wherein the pre-release report includes a performance category that provides information on performance problems associated with the application. 7 . The method of claim 1 , wherein the security category can provide a list of severity information having multiple categories and information to remedy a vulnerability. 8 . The method of claim 7 , wherein the security category can provide links to security articles associated with a particular issue. 9 . The method of claim 1 , wherein the pre-release report includes a usability category that provides usability information associated with testing of the application on the plurality of devices. 10 . The method of claim 9 , wherein the usability category is configured to enable screenshots to be displayed for the plurality of devices that were used to test the application. 11 . The method of claim 9 , wherein the usability category is configured to include information associated with a layout and user interface of a particular application on one or more of the plurality of devices. 12 . The method of claim 1 , wherein the pre-release report includes an application statistics category that provides information associated with an application's statistics. 13 . The method of claim 1 , wherein the pre-release report includes a code warnings category that is configured to identify potential problems in code and provide statistical analysis of the application. 14 . The method of claim 1 , wherein the pre-release report includes a localization category to provide information associated with language translations of the application. 15 . A system comprising: one or more processors; one or more computer readable storage media embodying computer readable instructions which, when executed by the one or more processors, implement a method comprising: receiving an application for testing; performing static analysis on the application; performing dynamic analysis on the application by loading the application onto a plurality of physical devices and using an automated robot tester to test the application; and responsive to performing said static analysis and said dynamic analysis, generating a network-accessible, pre-release report that includes a plurality of categories including: a crash category that provides a crash investigation report associated with application crashes; a screenshot category that provides one or more screenshots of the application taken while the application was being tested; and a security category that provides information associated with vulnerability scans of the application while the application was being tested. 16 . The system of claim 15 , wherein the crash investigation report includes a report section that provides a visual summary of device testing on the plurality of physical devices including device model name, operating system version, and language. 17 . The system of claim 16 , wherein the visual summary of device testing includes a portion that can provide a description associated with a particular crash. 18 . The system of claim 15 , wherein the one or more screenshots are configured to describe problems that are detected. 19 . The system of claim 15 , wherein the one or more screenshots are configured to describe problems that are detected during an application crash. 20 . The system of claim 15 , wherein the pre-release report includes a performance category that provides information on performance problems associated with the application.
Testing of software · CPC title
for test execution, e.g. scheduling of test suites · CPC title
Test or assess software · CPC title
for test results analysis · CPC title
by runtime analysis (performance monitoring G06F11/3466) · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.