Visualization of vulnerabilities detected by static application testing
AssigneeInternational Business Machines Corporation
InventorsKristofer A. Duer, John T. Peyton, Stephen D. Teilhet, Lin Tan, Jinqiu Yang
Life of this patent
Estimating the term…
Abstract
Vulnerability testing of applications may include one or more of identifying a number of paths from a software application being tested, identifying a number of nodes associated with the paths, determining one or more of the paths which share one or more of the nodes, designating the paths which share the nodes as overlapping paths, and displaying the overlapping paths and the shared nodes as an interactive visualization to identify to identify optimal locations to fix one or more vulnerability findings.
Claims20
A method comprising:
- testing, via a device, a software application while the application is being executed;
- identifying, via the device, paths of traces of vulnerabilities found in the software application while the software application is being tested;
- identifying, via the device, nodes located on the paths;
- determining, via the device, that at least two vulnerability findings have overlapping paths in response to traces of the at least two vulnerability findings sharing one or more nodes;
- and
- displaying, via a display, the overlapping paths of the traces of the at least two vulnerability findings as an interactive visualization to identify optimal locations to fix one or more vulnerability findings.
An apparatus, comprising:
- a processor configured to:
- test a software application while the application is being executed;
- identify paths of traces of vulnerabilities found in the software application while the software application is being tested;
- identify nodes located on the paths;
- and
- determine that at least two vulnerability findings have overlapping paths in response to traces of the at least two vulnerability findings sharing one or more nodes;
- and
- a display configured to display the overlapping paths of the traces of the at least two vulnerability findings as an interactive visualization to identify optimal locations to fix one or more vulnerability findings.
A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform:
- testing, via a device, a software application while the application is being executed;
- identifying, via the device, paths of traces of vulnerabilities found in the software application while the software application is being tested
- identifying nodes located on the paths;
- determining that at least two vulnerability findings have overlapping paths in response to traces of the at least two vulnerability findings sharing one or more nodes;
- displaying the overlapping paths of the traces of the at least two vulnerability findings as an interactive visualization to identify optimal locations to fix one or more vulnerability findings.
Dependencies are inferred from the claim text.