Automatic correction of security downgraders
AssigneeInternational Business Machines Corporation
InventorsSALVATORE A. GUARNIERI, MARCO PISTOIA, OMER TRIPP
Life of this patent
Estimating the term…
Abstract
Systems for automatic correction of security downgraders include a security analysis module configured to perform a security analysis that disregards existing user-provided downgraders to detect flows that are vulnerable; and an enhancer module configured to locate candidate downgraders on the flows, to determine whether each of the candidate downgraders protects against all vulnerabilities associated with each downgrader's respective flow, and to transform candidate downgraders that do not protect against all of the associated vulnerabilities such that the transformed downgraders do protect against all of the associated vulnerabilities.
Claims10
A system for automatic correction of security downgraders, comprising:
- a security analysis module configured to perform a security analysis that disregards existing user-provided downgraders to detect flows that are vulnerable;
- and
- an enhancer module comprising a processor configured to locate candidate downgraders on said flows, to determine whether each of the candidate downgraders protects against all vulnerabilities associated with each downgrader's respective flow, and to transform candidate downgraders that do not protect against all of the associated vulnerabilities such that the transformed downgraders do protect against all of the associated vulnerabilities.
A computer readable storage medium comprising a computer readable program for automatic correction of security downgraders, wherein the computer readable program when executed on a computer causes the computer to perform the steps of:
- performing a security analysis that disregards existing user-provided downgraders to detect flows that are vulnerable;
- locating candidate downgraders on said flows;
- determining whether each of the candidate downgraders protects against all vulnerabilities associated with each downgrader's respective flow;
- and
- transforming candidate downgraders that do not protect against all of the associated vulnerabilities such that the transformed downgraders do protect against all of the associated vulnerabilities.
Dependencies are inferred from the claim text.