Code Vulnerability Evaluator

Patent metadata

Field	Value
Publication number	US-2025265349-A1
Application number	US-202418581652-A
Country	US
Kind code	A1
Filing date	Feb 20, 2024
Priority date	Feb 20, 2024
Publication date	Aug 21, 2025
Grant date	—

Abstract

A computing platform provides code vulnerability detection and evaluation. The computing platform may use a quantum graph categorizer along with quantum polymorphism execution channels to reduce false positives and provide optimized real-time vulnerability evaluation of code and code segments. The computing platform may use a hybrid approach comprising a mix of static and dynamic vulnerability validation and real-time parallel technique execution.

First claim

What is claimed is:

1 . A computing platform comprising:
at least one processor; a communication interface communicatively coupled to the at least one processor; and memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
receive data related to code vulnerabilities;
generate a quantum graph network using a quantum graph categorizer and the received data related to code vulnerabilities;
determine a reconciliation ratio;
based on the reconciliation ratio, determine a vulnerability test case execution plan; and
execute the determined vulnerability test case execution plan to determine code vulnerabilities.

2 . The computing platform of claim 1 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to convert the received data related to the code vulnerabilities to quantum qubits.

3 . The computing platform of claim 2 , wherein the determined reconciliation ratio further includes determining a static vulnerability score, a hybrid vulnerability score, and a dynamic vulnerability score.

4 . The computing platform of claim 3 wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform, to compare the static vulnerability score to the dynamic vulnerability score.

5 . The computing platform of claim 4 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to modify the determined vulnerability test case execution plan to contain additional static code checks if the determined static vulnerability test score is greater than the dynamic vulnerability score.

6 . The computing platform of claim 4 , wherein the memory stores additional computer-readable instructions that, when executed by the at least one processor, cause the computing platform to modify the determined vulnerability test case execution plan to contain additional dynamic code checks if the determined dynamic vulnerability test score is greater than the static vulnerability score.

7 . The computing platform of claim 5 , wherein static code checks comprise analyzing code syntax and patterns, parsing and abstract tree generation, and predefined rule-based analysis.

8 . The computing platform of claim 6 , wherein static code checks comprise code instrumentation, fuzzy testing, monitoring and data collection, dynamic memory analysis, and sanitizers.

9 . The computing platform of claim 1 , wherein executing the determined vulnerability test case execution plan to determine code vulnerabilities comprises quantum polymorphism execution channels to enable dynamic virtual copies of the code to be executed in parallel and reconciled for the vulnerability test case execution plan.

10 . A method comprising:
at a computing platform comprising at least one processor, a communication interface, and memory:
receiving data related to code vulnerabilities;
generating a quantum graph network using a quantum graph categorizer and the received data related to code vulnerabilities;
determining a reconciliation ratio;
based on the reconciliation ratio, determining a vulnerability test case execution plan; and
executing the determined vulnerability test case execution plan to determine code vulnerabilities.

11 . The method of claim 10 further comprising causing the computing platform to convert the received data related to the code vulnerabilities to quantum qubits.

12 . The method of claim 11 further comprising: determining that the reconciliation ratio further includes determining a static vulnerability score, a hybrid vulnerability score, and a dynamic vulnerability score.

13 . The method of claim 12 , further comprising comparing the static vulnerability score to the dynamic vulnerability score

14 . The method of claim 13 , wherein modifying the determined vulnerability test case execution plan to contain additional static code checks if the determined static vulnerability test score is greater than the dynamic vulnerability score.

15 . The method of claim 13 , wherein modifying the determined vulnerability test case execution plan to contain additional dynamic code checks if the determined dynamic vulnerability test score is greater than the static vulnerability score.

16 . The method of claim 10 , wherein executing the determined vulnerability test case execution plan to determine code vulnerabilities comprises quantum polymorphism execution channels to enable dynamic virtual copies of the code to be executed in parallel and reconciled for the vulnerability test case execution plan.

17 . One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:
receive data related to code vulnerabilities; generate a quantum graph network using a quantum graph categorizer and the received data related to code vulnerabilities; determine a reconciliation ratio; based on the reconciliation ratio, determine a vulnerability test case execution plan; and execute the determined vulnerability test case execution plan to determine code vulnerabilities.

18 . The one or more non-transitory computer-readable media storing instructions of claim 17 , that when executed by the computing platform comprising at least one processor, a communication interface, and memory, further cause the computing platform to convert the received data related to the code vulnerabilities to quantum qubits.

19 . The one or more non-transitory computer-readable media storing instructions of claim 17 , wherein the determined reconciliation ratio further includes determining a static vulnerability score, a hybrid vulnerability score, and a dynamic vulnerability score.

20 . One or more non-transitory computer-readable media storing instructions of claim 19 , that when executed by the computing platform comprising at least one processor, a communication interface, and memory, further cause the computing platform to compare the static vulnerability score to the dynamic vulnerability score.

Assignees

• Bank Of America

Inventors

• Taneja Pushkar
• Dashputra Yash Pant
• Bakshi Sakshi
• Reddy Amar Deep

Classifications

• G06F2221/033

  Test or assess software · CPC title

• G06F21/577 Primary

  Assessing vulnerabilities and evaluating computer system security · CPC title