Analyzing target software for security vulnerabilities
AssigneeEntit Software LLC
InventorMichael Jason Schmitt
Life of this patent
Estimating the term…
Abstract
A method of analyzing target software for security vulnerabilities comprises, with a processor, scanning a codebase of a target software using a static analysis scan to identify a number of security flaws, and calculating a number of code metrics of the codebase of the target software for a number of iterations over a period of time to obtain a number of historical scans.
Claims13
A method of analyzing target software for security vulnerabilities comprising, with a hardware processor:
- at each of a plurality of iterations over a period of time:
- scanning a codebase of a target software using a static analysis scan to identify security flaws;
- obtaining runtime security information from a runtime environment of a version of the target software;
- and
- calculating code metrics of the codebase of the target software;
- analyzing correlations between the security flaws, the runtime security information, and the code metrics over the period of time;
- and
- prioritizing the security flaws based on the correlations.
A system for analyzing target software for security vulnerabilities comprising:
- a hardware processor;
- a data storage device coupled to the processor, the data storage device storing instructions executable by the hardware processor to:
- scan a codebase of a target software to identify security flaws at each of a plurality of iterations over a period of time;
- obtain runtime security information of the target software at each iteration over the period of time;
- calculate code metrics of the codebase of the target software at each iteration over the period of time;
- analyze correlations among the security flaws, the runtime security information, and the code metrics;
- and
- prioritize the security flaws based the correlations among the security flaws, the runtime security information, and the code metrics;
- and
- a historical scan database for storing the security flaws, the runtime security information, and the code metrics at each iteration as historical scans.
A computer program product for analyzing target software for security vulnerabilities, the computer program product comprising:
- a non-transitory computer readable storage medium comprising computer usable program code embodied therewith, the computer usable program code executable by a hardware processor to:
- analyze correlations among static analysis scans identifying security flaws, code metrics, and runtime security scans determined from target software at each of a plurality of iterations over a period of time;
- and
- prioritize the security flaws based on the correlations.
Dependencies are inferred from the claim text.