Automatic generation of patches for security violations

A method of automatically generating patches for security violations, comprising:

• generating, by one or more processors, a plurality of inputs for code;
• executing, by the one or more processors, the code using the plurality of inputs to obtain execution states at a plurality of code locations, the execution states including at least one security violation for at least one of the plurality of inputs;
• identifying, by one or more processors, one or more code conditions causing the security violation;
• determining, by the one or more processors using the execution states, one or more patch conditions for the one or more code conditions, the one or more patch conditions comprising at least one dynamic invariant related to the identified one or more code conditions, wherein the at least one dynamic invariant is determined using a machine learning model trained using the generated plurality of inputs for code, and wherein the at least one dynamic invariant comprises a condition that applies to executions of the code;
• generating, by the one or more processors, program metadata based on the one or more patch conditions;
• determining, by the one or more processors, using the execution states, one or more corresponding patch locations based on the one or more code conditions;
• and
• automatically generating, by the one or more processors, at least one candidate patch for the at least one security violation based on the program metadata, the at least one candidate patch includes one of the patch conditions and one of the one or more corresponding patch locations, wherein the at least one candidate patch is configured to cause at least part of the code to abort execution before a security violation can occur.