Security vulnerability correction
AssigneeTata Consultancy Services Limited
InventorMarc-André Laverdière-Papineau
Life of this patent
Estimating the term…
Abstract
Systems and methods for addressing security vulnerability in a program code are described. The method comprises detecting a security vulnerability. The method further comprises identifying a set of security solutions specified within a specification repository, wherein each security solution is associated with the detected security vulnerability. The method further comprises presenting the set of security solutions to a user for selection. The method further comprises transforming a program code portion associated with the detected security vulnerability in conformance with a security solution selected by the user from the set of security solutions.
Claims17
A computer-implementable method for addressing security vulnerabilities in a program code, the method comprising:
- detecting a security vulnerability;
- identifying a set of security solutions specified within a specification repository, wherein each security solution is associated with the detected security vulnerability;
- presenting the set of security solutions to a user for selection;
- and
- transforming a program code portion associated with the detected security vulnerability in conformance with a security solution selected by the user from the set of security solutions.
A Security Vulnerability Correction System (SVCS) for addressing security vulnerabilities in a program code, the SVCS comprising:
- a processor;
- and
- a memory coupled to the processor, the memory comprising:
- a static analysis tool for detecting a security vulnerability;
- a composer for identifying a set of security solutions specified within a specification repository, wherein each security solution is associated with the detected security vulnerability;
- and
- a refactoring engine for transforming a program code portion associated with the detected security vulnerability in conformance with a security solution selected by the user from the set of security solutions.
A computer-readable medium having embodied thereon a computer program for executing a method for addressing security vulnerability in a program code, the method comprising:
- detecting a security vulnerability;
- identifying a set of security solutions specified within a specification repository, wherein each security solution is associated with the detected security vulnerability;
- presenting the set of security solutions to a user for selection;
- and
- transforming a program code portion associated with the detected security vulnerability in conformance with a security solution selected by the user from the set of security solutions.
Dependencies are inferred from the claim text.