Automated Application Vulnerability And Risk Assessment

A system for assessing security vulnerability of an application, the system comprising:

• a processor;
• and
• a memory with computer code instructions stored thereon, the processor and the memory, with the computer code instructions, being configured to cause the system to:
• run one or more static analysis tools on the application to generate a static vulnerability report;
• run one or more dynamic analysis tools on the application to generate a dynamic vulnerability report;
• decompile code of the application to identify code of the application that accepts user input;
• determine one or more vulnerabilities of the application using the identified code of the application that accepts user input;
• generate a vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input;
• and
• generate a final static vulnerability report and a final dynamic vulnerability report based on the static vulnerability report, the dynamic vulnerability report, and the generated vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input, wherein the final static vulnerability report and the final dynamic vulnerability report enable remediating vulnerabilities of the application.

A computer program product for assessing security vulnerability of an application, the computer program product comprising:

• one or more non-transitory computer-readable storage devices and program instructions stored on at least one of the one or more storage devices, the program instructions, when loaded and executed by a processor, cause an apparatus associated with the processor to:
• run one or more static analysis tools on the application to generate a static vulnerability report;
• run one or more dynamic analysis tools on the application to generate a dynamic vulnerability report;
• decompile code of the application to identify code of the application that accepts user input;
• determine one or more vulnerabilities of the application using the identified code of the application that accepts user input;
• generate a vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input;
• and
• generate a final static vulnerability report and a final dynamic vulnerability report based on the static vulnerability report, the dynamic vulnerability report, and the generated vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input, wherein the final static vulnerability report and the final dynamic vulnerability report enable remediating vulnerabilities of the application.