Visualization of vulnerabilities detected by static application testing
AssigneeInternational Business Machines Corporation
InventorsKristofer A. Duer, John T. Peyton, Stephen D. Teilhet, Lin Tan, Jinqiu Yang
Life of this patent
Estimating the term…
Abstract
Vulnerability testing of applications may include one or more of identifying a number of paths from a software application being tested, identifying a number of nodes associated with the paths, determining one or more of the paths which share one or more of the nodes, designating the paths which share the nodes as overlapping paths, and displaying the overlapping paths and the shared nodes as an interactive visualization to identify to identify optimal locations to fix one or more vulnerability findings.
Claims20
A method comprising:
- testing, via a device, a software application while the application is being executed;
- identifying, via the device, a plurality of paths from the software application being tested;
- identifying, via the device, a plurality of nodes associated with the plurality of paths;
- determining, via the device, one or more of the plurality of paths which share one or more of the plurality of nodes;
- designating, via the device, the one or more of the plurality of paths which share the one or more of the plurality of nodes as overlapping paths;
- and
- displaying, via a display, the overlapping paths and the shared nodes as an interactive visualization to identify optimal locations to fix one or more vulnerability findings.
An apparatus, comprising:
- a processor configured to:
- test a software application while the application is being executed;
- identify a plurality of paths from the software application being tested;
- identify a plurality of nodes associated with the plurality of paths;
- determine one or more of the plurality of paths which share one or more of the plurality of nodes;
- designate the one or more of the plurality of paths which share the one or more of the plurality of nodes as overlapping paths;
- and
- a display configured to display the overlapping paths and the shared nodes as an interactive visualization to identify optimal locations to fix one or more vulnerability findings.
A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform:
- testing, via a device, a software application while the application is being executed;
- identifying, via the device, a plurality of paths from the software application being tested identifying a plurality of nodes associated with the plurality of paths;
- determining one or more of the plurality of paths which share one or more of the plurality of nodes;
- designating the one or more of the plurality of paths which share the one or more of the plurality of nodes as overlapping paths;
- and
- displaying the overlapping paths and the shared nodes as an interactive visualization to identify optimal locations to fix one or more vulnerability findings.
Dependencies are inferred from the claim text.