System and method for analyzing computer code
OwnerJohn Viega, Matt Messierinventors
Life of this patent
Estimating the term…
Abstract
A system and method for analyzing computer code are provided. An original language of a computer code is determined. The original language can be selected from multiple computer languages. The computer code is translated to a generic computer language, which maintains the instructions of the computer code. The generic language is analyzed according to one or more pre-determined rules to determine if any incidents of interest exist within the computer code. The incidents of interest can include, for example, security-related items. If desired, a user can be notified of any incidents of interest.
Claims50
A system, comprising:
- a translator configured to translate code including code from one of a plurality of computer languages to a generic computer language, the generic computer language maintaining the instructions of the code;
- a knowledge base component configured to store a plurality of analysis rules associated with analysis of code in the generic computer language;
- an analysis engine in communication with the language translator and the knowledge base component, the analysis engine being configured to analyze code in the generic computer language received from the translator according to one or more rules stored by the knowledge base component, the analysis engine being further configured to output any incidents of interest required to be reported by the one or more rules;
- and
- a reporting component in communication with the analysis engine, the reporting component being configured to report any incidents of interest output by the analysis engine in a form readily accessible by a user.
A method, comprising:
- determining an original language of a computer code, the original language being from a plurality of computer languages;
- translating the computer code to a generic computer language, the generic computer language maintaining the instructions of the computer code;
- and
- analyzing the generic language according to one or more pre-determined rules to determine if any incidents of interest exist within the computer code.
A processor-readable medium comprising code representing instructions to cause a processor to:
- determine an original language of a computer code, the original language being from a plurality of computer languages;
- translate the computer code to a generic computer language, the generic computer language maintaining the instructions of the computer code;
- and
- analyze the generic language according to one or more pre-determined rules to determine if any incidents of interest exist within the computer code.
Dependencies are inferred from the claim text.