Analyzing target software for security vulnerabilities
AssigneeHewlett-Packard Development Company, L.P.
InventorMichael Jason Schmitt
Life of this patent
Estimating the term…
Abstract
A method of analyzing target software for security vulnerabilities comprises, with a processor, scanning a codebase of a target software using a static analysis scan to identify a number of security flaws, and calculating a number of code metrics of the codebase of the target software for a number of iterations over a period of time to obtain a number of historical scans.
Claims15
A method of analyzing target software for security vulnerabilities comprising, with a processor:
- scanning a codebase of a target software using a static analysis scan to identify a number of security flaws, and calculating a number of code metrics of the codebase of the target software for a number of iterations over a period of time to obtain a number of historical scans;
- and
- analyzing a number of correlations between security flaw evolution and a number of the code metrics.
A system for analyzing target software for security vulnerabilities comprising:
- a processor;
- a data storage device coupled to the processor, the data storage device comprising:
- a static analysis module to scan a codebase of a target software to identify a number of security flaws;
- a runtime security module to obtain runtime security information from the runtime environment of a version of the target software;
- and
- a code metrics module to calculate a number of code metrics of the codebase of the target software;
- and
- a historical scan database for storing a number of historical scans over a number of iterations over a period of time, the historical scans comprising results of at least one of the static analysis module, runtime security module, and code metrics module.
A computer program product for analyzing target software for security vulnerabilities, the computer program product comprising:
- a non-transitory computer readable storage medium comprising computer usable program code embodied therewith, the computer usable program code comprising:
- computer usable program code to, when executed by at least one processor, analyze a number of correlations between a number of static analysis scans, a number of code metrics, and a number of runtime security scans determined from target software;
- and
- computer usable program code to, when executed by the at least one processor, prioritize a number of security flaws based on the correlations.
Dependencies are inferred from the claim text.