Weighted security analysis

Patent metadata

Field	Value
Publication number	US-8935795-B2
Application number	US-201313974385-A
Country	US
Kind code	B2
Filing date	Aug 23, 2013
Priority date	Oct 26, 2012
Publication date	Jan 13, 2015
Grant date	Jan 13, 2015

Abstract

A method, computer program product, and system for transforming unit tests is described. A unit test associated with one or more software units is identified. A graphical representation of a portion of a computer program is built, wherein the graphical representation includes a control flow edge. A potentially vulnerable data flow associated with the control flow edge is identified. A control flow weight is assigned to the control flow edge, based upon, at least in part, identifying the potentially vulnerable data flow. A security analysis is applied to the portion of the computer program based upon, at least in part, the control flow weight.

First claim

What is claimed is:

1. A computer-implemented method comprising:
building, by one or more computing devices, a graphical representation of a portion of a computer program, wherein the graphical representation includes a plurality of control flow edges;
identifying, by the one or more computing devices, a potentially vulnerable data flow associated with at least one of the plurality of control flow edges, including:
identifying one or more sink statements associated with the com…

Assignees

• IBM

Inventors

• Tripp Omer

Classifications

• G06F21/577 Primary

  Physics · mapped topic

• H04L63/1433 Primary

  Electricity · mapped topic

• H04L63/14

  Electricity · mapped topic

• G06F21/604

  Physics · mapped topic

• H04L9/002

  Electricity · mapped topic