Rule matching in the presence of languages with no types or as an adjunct to current analyses for security vulnerability analysis

A computing system comprising:

• one or more memories storing computer-readable code;
• and
• one or more processors, configured in response to executing the computer-readable code to cause the computing system to perform:
• reading by the computing system a rule file comprising one or more rules having specified paths to methods, each method corresponding to one of a sink, source, or sanitizer;
• matching by the computing system the methods to corresponding ones of sinks, sources, or sanitizers determined through a static analysis of an application, wherein the static analysis determines at least flows from sources of information to sinks that use the information;
• and
• performing by the computing system, using the sinks, sources, and sanitizers found by the matching, a taint analysis to determine at least tainted flows from sources to sinks, wherein the tainted flows are flows passing information to sinks without the information being endorsed by a sanitizer.

A computer program product comprising a non-transitory computer readable storage medium having program code embodied therewith, the program code executable by a computing system to cause the computing system to perform:

• reading by the computing system a rule file comprising one or more rules having specified paths to methods, each method corresponding to one of a sink, source, or sanitizer;
• matching by the computing system the methods to corresponding ones of sinks, sources, or sanitizers determined through a static analysis of an application and by the computing system, wherein the static analysis determines at least flows from sources of information to sinks that use the information;
• and
• performing by the computing system, using the sinks, sources, and sanitizers found by the matching, a taint analysis to determine at least tainted flows from sources to sinks, wherein the tainted flows are flows passing information to sinks without the information being endorsed by a sanitizer.