Automatic identification of flaws in software systems
AssigneeCheckmarx Ltd.
InventorsMaty Siman, Alexander Roichman
Life of this patent
Estimating the term…
Abstract
A system includes an output device and a processor. The processor is configured to analyze a software system, which includes an application subsystem and a configuration subsystem, so as to generate an output describing (i) one or more operations performed by the application subsystem, and (ii) one or more configurations for the application subsystem, which are provided by the configuration subsystem. The processor is further configured to identify, based on the output, at least one flaw in the software system that results from a combination of the operations with the configurations, and to output via the output device, in response to identifying the flaw, an indication of the flaw. Other embodiments are also described.
Claims20
A system, comprising:
- an output device;
- and
- a processor, configured to:
- analyze a software system, which includes an application subsystem and a configuration subsystem, so as to generate an output describing (i) one or more operations performed by the application subsystem, and (ii) one or more configurations for the application subsystem, which are provided by the configuration subsystem,
- based on the output, identify at least one flaw in the software system that results from a combination of the operations with the configurations, and
- in response to identifying the flaw, output, via the output device, an indication of the flaw.
A method, comprising:
- using a processor, analyzing a software system, which includes an application subsystem and a configuration subsystem, so as to generate an output describing (i) one or more operations performed by the application subsystem, and (ii) one or more configurations for the application subsystem, which are provided by the configuration subsystem;
- based on the output, identifying at least one flaw in the software system that results from a combination of the operations with the configurations;
- and
- in response to identifying the flaw, outputting an indication of the flaw.
A computer software product comprising a tangible non-transitory computer-readable medium in which program instructions are stored, which instructions, when read by a processor, cause the processor to:
- analyze a software system, which includes an application subsystem and a configuration subsystem, so as to generate an output describing (i) one or more operations performed by the application subsystem, and (ii) one or more configurations for the application subsystem, which are provided by the configuration subsystem,
- based on the output, identify at least one flaw in the software system that results from a combination of the operations with the configurations, and
- in response to identifying the flaw, output an indication of the flaw.
Dependencies are inferred from the claim text.