Security risk evaluation
AssigneeInternational Business Machines Corporation
InventorsROEE HAY, OMER TRIPP, MARCO PISTOIA
Life of this patent
Estimating the term…
Abstract
A system for evaluating security risks including a processor to detect a set of vulnerabilities for an application based on static analysis of the application and calculate a risk score associated with each of the vulnerabilities based on additional characteristics of the application. The processor can also modify the application to prevent vulnerabilities with a risk score above a risk threshold value.
Claims20
A system for evaluating security risks comprising:
- a processor to:
- detect a set of vulnerabilities for an application based on static analysis of the application;
- calculate a risk score associated with each of the vulnerabilities based on additional characteristics of the application;
- and
- modify the application to prevent vulnerabilities with a risk score above a risk threshold value.
A method for evaluating security risks comprising:
- detecting, via a processor, a set of vulnerabilities for an application based on static analysis of the application;
- calculating, via the processor, a risk score associated with each of the vulnerabilities based on additional characteristics of the application;
- and
- modifying, via the processor, the application to prevent vulnerabilities with a risk score above a risk threshold value.
A computer program product for evaluating security risks, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions executable by a processor to cause the processor to:
- detect a set of vulnerabilities for an application based on static analysis of the application;
- calculate a risk score associated with each of the vulnerabilities based on additional characteristics of the application;
- and
- modify the application to prevent vulnerabilities with a risk score above a risk threshold value.
Dependencies are inferred from the claim text.