Discovery of application vulnerabilities involving multiple execution flows

A computer readable storage medium comprising a computer readable program for security analysis of a web application, wherein the computer readable program when executed on a computer causes the computer to perform the steps of:

• conducting a flow-insensitive analysis on the application to obtain a set of potential witnesses of vulnerabilities in the application;
• for each of the potential witnesses, restricting a scope of analysis within program code of the application to a relevant set of control flows;
• and
• for at least one of the relevant sets of control flows, performing a flow-sensitive analysis of a concatenation of the control flows in the corresponding relevant set to assess a validity of the respective witness across multiple executions of the web application.

A system for security analysis of an application comprising:

• a flow-insensitive analyzer configured to conduct a flow-insensitive analysis on the application to obtain a set of potential vulnerabilities in the application;
• a control flow assessment module configured to determine, for at least one of the potential vulnerabilities, a relevant sequence of control flows that enable source to sink data propagation;
• and
• a flow-insensitive analyzer configured to perform, by a hardware processor, for at least one relevant sequence of control flows, a flow-sensitive analysis of a concatenation of a plurality of control flows in the corresponding relevant sequence to assess a validity of the respective vulnerability.