Back to results
US 2024/0176891 A1Published application
Comparative analysis of binaries for software supply chain security
AssigneeKarambit.Ai Inc.
InventorsAndrew Aarne HENDELA, Eric Hyunjoon LEE, JR.
Life of this patent
Estimating the term…
Abstract
Comparing how behaviors, functions, and other features have changed between different software versions, embodiments determine how the software has changed between versions and make an assessment as to whether or not the newer version of the software has unintended functionality.
Claims20
A method for identifying a risk level associated with an update to a software product, the method comprising:
- extracting one or more first features from a first version of the software product;
- identifying one or more first behaviors, associated with the extracted one or more first features, that can occur when the first version of the software product is executed on a computing device;
- extracting one or more second features from a second version of the software product;
- identifying one or more second behaviors, associated with the extracted one or more second features, that can occur when the second version of the software product is executed;
- comparing the one or more first behaviors with the one or more second behaviors to identify one or more behavioral differences between the first version of the software product and the second version of the software product;
- identifying a risk level associated with the one or more behavioral differences;
- and
- outputting an indication of the risk level associated with the second version of the software product to a user.
5 more elements
A non-transient, computer-readable medium containing computer-readable program code which, when executed on one or more processors, performs the steps of:
- extracting one or more first features from a first version of the software product;
- identifying one or more first behaviors, associated with the extracted one or more first features, that will can occur when the first version of the software product is executed on a computing device;
- extracting one or more second features from a second version of the software product;
- identifying one or more second behaviors, associated with the extracted one or more second features, that will can occur when the second version of the software product is executed;
- comparing the one or more first behaviors with the one or more second behaviors to identify one or more behavioral differences between the first version of the software product and the second version of the software product;
- identifying a risk level associated with the one or more behavioral differences;
- and
- outputting an indication of the risk level associated with the second version of the software product to a user.
5 more elements
Dependencies are inferred from the claim text.