Back to results
US 2022/0012341 A1Published application
Systems and methods for software security analysis
AssigneeCrosscode, Inc.
InventorSoumik Sarkar
Life of this patent
Estimating the term…
Abstract
A security analysis of software includes analyzing security risks at each level of the hierarchy of the software and aggregating identified risks within the hierarchy levels. Weights applied during aggregation assist in homogenizing risk scores originating from different types of identified security risks and provide for the ability to communicate a meaningful risk score at each level of the hierarchy.
Claims14
A computer-implemented method for analyzing software dependencies, comprising:
- on a first asset, executing a technology agent configured to:
- analyze software stored in memory of the first asset, the analysis comprising:
- identifying nodes within the software,
- recording a hierarchy of the nodes within the software,
- identifying any dependencies within the software and with other portions of software;
- and
- on the first asset, executing a security agent configured to:
- analyze security of the software stored in the memory of the first asset, the security analysis comprising:
- identifying security risks in the software and assigning a risk level to each,
- associating each identified security risk with a node or edge,
- is aggregating security risks at at least two different levels of the software hierarchy into hierarchy level risk scores by adding risk levels of identified security risks associated with nodes or edges within the levels.
8 more elements
Dependencies are inferred from the claim text.