Identifying implicit assumptions associated with a software product

A system comprising:

• one or more processing devices;
• and
• at least one computer readable storage medium storing computer readable instructions which, when executed by the one or more processing devices, cause the one or more processing devices to:
• obtain a test suite associated with a software product, the test suite identifying a plurality of vulnerability patterns, wherein the plurality of vulnerability patterns are identified based at least in part on a previous analysis of associated natural language documentation for the software product;
• obtain a conformant application that has been produced using the software product and that conforms with the natural language documentation for the software product;
• and
• identify a particular vulnerability pattern present in the conformant application by using the test suite to test the conformant application, wherein the particular vulnerability pattern corresponds to a particular assumption identified by the previous analysis of the natural language documentation for the software product and wherein the particular assumption is not expressly stated by the natural language documentation for the software product.

A system comprising:

• a processing device;
• and
• a volatile or non-volatile memory storing computer readable instructions which, when executed, cause the processing device to implement a testing environment,
• wherein the testing environment is configured to:
• obtain an application produced using a software product;
• and
• perform a test on the application to identify a particular vulnerability pattern present in the application,
• wherein the particular vulnerability pattern is identified in an instance when the application has been constructed consistently with a natural language developer's guide for the software product, and
• wherein the particular vulnerability pattern corresponds to a particular assumption identified by analysis of the natural language developer's guide for the software product and the particular assumption is not expressly stated by the natural language developer's guide for the software product.