US 11,113,406 B2Granted

Methods and systems for de-duplication of findings

AssigneeCapital One Services, LLC

InventorsAdam Youngberg, Stephen Kent

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system for performing de-duplication of findings includes a non-transitory computer readable medium and a processor. The non-transitory computer readable medium stores normalized findings of application code performed by at least one software security analysis tool. Each normalized finding is identifiable by a fingerprint. The processor receives a first finding in a first vendor-provided format from a first software security analysis tool that performs a scan of application code. The processor receives a second finding in a second vendor-provided format from a second software security analysis tool. The processor normalizes the findings to a standardized taxonomy. The processor determines a first fingerprint and a second fingerprint that respectively identify the normalized first and second findings. The processor determines any need to update the normalized first finding by comparing the normalized second finding with the normalized first finding after determining that the second fingerprint at least partially matches the first fingerprint.

Claims18

Dependent claims

A system for performing de-duplication of findings, comprising:

one or more processors;
a graphical user interface configured for display and operably connected to the one or more processors;
and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to:
receive, from a first software security analysis tool, a first finding comprising one or more software issues, the first software security analysis tool being a Static Application Security Testing (SAST) tool or a Dynamic Application Security Testing (DAST) tool;
determine a first identifier that identifies the first finding;
store the first finding and the first identifier;
receive, from a second software security analysis tool, a second finding comprising one or more software issues, the second software security analysis tool being a Static Application Security Testing (SAST) tool or a Dynamic Application Security Testing (DAST) tool;
determine a second identifier that identifies the second finding;
determine that the second identifier at least partially matches the first identifier;
appending the first finding to the second finding;
comparing the one or more software issues of the first finding to the one or more software issues of the second finding to determine at least a partial match;
and
removing the at least partial match from the first finding.

11 more elements

A system for performing de-duplication of findings, comprising:

one or more processors;
a graphical user interface configured for display and operably connected to the one or more processors;
and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to:
receive, from a first software security analysis tool, a first finding comprising one or more software issues, the first software security analysis tool comprising a Static Application Security Testing (SAST) tool or a Dynamic Application Security Testing (DAST) tool;
determine a first identifier that identifies the first finding;
store the first finding and the first identifier;
receive, from a second software security analysis tool, a second finding comprising one or more software issues, the second software security analysis tool comprising a Static Application Security Testing (SAST) tool or a Dynamic Application Security Testing (DAST) tool;
determine a second identifier that identifies the second finding;
determine that the second identifier at least partially matches the first identifier;
append the first finding to the second finding;
compare the one or more software issues of the first finding to the one or more software issues of the second finding to determine at least a partial match;
and
remove the at least partial match from the first finding to create an update first finding;
store the updated first finding;
cause the graphical user interface to display the updated first finding;
and
cause the graphical user interface to display the first finding prior to the update.

15 more elements

A system for performing de-duplication of findings, comprising:

one or more processors;
a graphical user interface configured for display and operably connected to the one or more processors;
and
a memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to:
receive, from a first software security analysis tool comprising a Static Application Security Testing (SAST) tool or a Dynamic Application Security Testing (DAST) tool, a first finding, wherein the first finding includes one or more respective software issues and a first identifier;
store the first finding and the first identifier;
receive, from a second software security analysis tool comprising a Static Application Security Testing (SAST) tool or a Dynamic Application Security Testing (DAST) tool, a second finding, wherein the second finding includes one or more respective software issues and a second identifier;
determine that the second identifier at least partially matches the first identifier;
generate a third finding by combining the first finding with the second finding;
compare the one or more software issues of the first finding to the one or more software issues of the second finding to determine at least a partial match;
remove the at least partial match from the third finding;
store the third finding;
cause the graphical user interface to display the third finding;
and
cause the graphical user interface to display the first finding.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/504,367Filed 8 Jul 2019 · continuation
Priority: 31 Oct 2018
Published: US 2020/0134193 A130 Apr 2020
Granted: 7 Sep 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
G06F 16/1748
Redundancy elimination performed by the file system: de-duplication implemented within the file system, e.g. based on file segments
G06F 21/552
Detecting local intrusion or implementing counter-measures: involving long-term monitoring or reporting
G06F 21/562
Computer malware detection or handling, e.g. anti-virus arrangements: static detection

Family

Application16/177,299Parent of this continuation · filed 31 Oct 2018
US 2020/0134193 A1Pre-grant publication · published 30 Apr 2020
US 10,387,659 B1Parent of this continuation
US 11,113,406 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key