Software vulnerabilities detection system and methods

A software vulnerabilities detection system comprising:

• a memory device storing computer-readable instructions;
• a microprocessor, coupled to the memory device for executing instructions stored thereon, comprising a set of concurrent worker threads;
• the microprocessor is configured to:
• a) receive compiled code and source code that resulted in said compiled code, wherein each of said concurrent worker threads processes an instruction from said compiled code where an external input is supplied;
• b) create an instruction model for each instruction of said compiled code comprising location, debug information, instruction type, operands, existing memory state requirements, bytecode metadata, potential security attributes, basic block membership, function/method membership, and class membership of each said instructions;
• c) create a control flow graph for each said instructions comprising all potential control flow paths, and a bidirectional list of predecessor instructions for each said instruction;
• d) create a data flow model comprising recorded flow of unsafe data as observed during execution of said compiled code;
• e) analyze said instruction model, said control graph and said data flow model to create a security finding for each said instruction that calls an unsafe function on said unsafe data;
• and
• f) generate a security report comprising each said security finding with corresponding said debug information and said source code information, and an execution trace of said unsafe data corresponding to each said security finding, wherein said execution trace comprising information from the origin to the termination of said unsafe data, and the associated line numbers from said source code information.