Back to results
US 2016/0241585 A1Published application
Analyze code that uses web framework using local parameter model
AssigneeHewlett Packard Enterprise Development LP
InventorLu Zhao
Life of this patent
Estimating the term…
Abstract
Example embodiments disclosed herein relate to analyze code of a web application associated with a framework. The code is loaded. Data objects of the framework that are used by the code are modeled using local parameters with explicit control flow. The code is analyzed to identify at least one vulnerability by analyzing one or more execution paths of the code using the explicit control flow.
Claims15
A non-transitory machine-readable storage medium storing instructions that, if executed by at least one processor of a device, cause the device to:
- load code of a web application associated with a framework;
- wherein data objects of the framework used by the code are modeled using local parameters with explicit control flow;
- and
- analyze the code to identify at least one vulnerability by analyzing one or more execution paths of the code using the explicit control flow.
1 more element
A method comprising:
- determining a model for a framework, wherein the model uses local parameters with explicit control flow based on a specification of the framework;
- loading code of a web application that uses the framework;
- determining data objects of the framework used by the code;
- replacing at least one of the data objects in the code with the local parameters of the model;
- and
- analyzing the code using the model to identify at least one security vulnerability by analyzing one or more execution paths of the code using the explicit control flow.
3 more elements
A computing system comprising:
- an application load engine to load code of a web application that uses a framework,
- a framework identification and model setup engine to determine a plurality of data objects of the framework used by the code,
- a replacement engine to replace at least one of the data objects with one or more local parameters of a model, wherein the model uses the local parameters with explicit control flow based on a specification of the framework;
- and
- an analysis engine to identify at least one security vulnerability by analyzing one or more execution paths of the code using the explicit control flow.
2 more elements
Dependencies are inferred from the claim text.