Apparatus and method for efficient vulnerability detection in dependency trees
AssigneeSoos LLC
InventorJoshua Holden Jennings
Life of this patent
Estimating the term…
Abstract
An apparatus for scanning vulnerabilities, wherein the apparatus includes at least a processor and a memory communicatively connected to the at least a processor, the memory containing instructions configuring the at least a processor to access at least a manifest file, wherein the at least manifest file includes at least a direct dependency, scan the manifest file for a software package data, extract the software package data from the manifest file, generate at least a dependency tree as a function of the software package data, and store the dependency tree in a database. A method for scanning vulnerabilities is also disclosed.
Claims18
An apparatus for scanning vulnerabilities, wherein the apparatus comprises:
- at least a processor;
- and
- a memory communicatively connected to the at least a processor, the memory containing instructions configuring the at least a processor to:
- access at least a manifest file, wherein the at least a manifest file comprises at least a direct dependency;
- scan the manifest file for software package data;
- extract the software package data from the manifest file, wherein the software package data comprises a plurality of software package vulnerabilities, wherein the plurality of software package vulnerabilities comprises at least a memory safety violation;
- generate at least a dependency tree as a function of the software package data;
- and
- store the at least a dependency tree in a database, wherein the storing further comprises storing a software vulnerability count.
A method for scanning vulnerabilities, wherein the method comprises:
- accessing, using at least a processor, at least a manifest file, wherein the at least a manifest file comprises at least a direct dependency;
- scanning, using the at least a processor, the manifest file for a software package data;
- extracting, using the at least a processor, the software package data from the manifest file, wherein the software package data comprises a plurality of software package vulnerabilities, wherein the software package vulnerabilities comprises at least a memory safety violation;
- generating, using the at least a processor, at least a dependency tree as a function of the software package data;
- and
- storing, by the at least a processor, the at least a dependency tree in a database, wherein the storing further comprises storing a software vulnerability count.
Dependencies are inferred from the claim text.