Security analysis using relational abstraction of data structures
AssigneeInternational Business Machines Corporation
InventorOmer Tripp
Life of this patent
Estimating the term…
Abstract
Analyzing program code can include detecting an instance of a container within the program code using a processor, selecting a model container correlated with the container using the processor, and creating an instance of the model container within memory using the processor. A data-flow of the program code can be tracked through the instance of the model container instead of the instance of the container.
Claims20
A computer-implemented method for analyzing program code, comprising:
- detecting an instance of a container within the program code;
- selecting a model container correlated with the container;
- creating, within memory, an instance of the model container;
- and
- tracking a data-flow of the program code through the instance of the model container instead of the instance of the container, wherein
- the model container is a relationship abstraction of the container.
A computer-implemented hardware system configured to analyze program code, comprising:
- a hardware processor configured to initiate the following executable operations:
- detecting an instance of a container within the program code;
- selecting a model container correlated with the container;
- creating, within memory, an instance of the model container;
- and
- tracking a data-flow of the program code through the instance of the model container instead of the instance of the container, wherein
- the model container is a relationship abstraction of the container.
A computer program product, comprising:
- a hardware storage device having stored therein computer instructions for analyzing program code,
- the computer instructions, which when executed by a computer hardware system, cause the computer hardware system to perform:
- detecting an instance of a container within the program code;
- selecting a model container correlated with the container;
- creating, within memory, an instance of the model container;
- and
- tracking a data-flow of the program code through the instance of the model container instead of the instance of the container, wherein
- the model container is a relationship abstraction of the container.
Dependencies are inferred from the claim text.