Security risk scoring of an application
US10318740B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Jul 30, 2014 |
| Grant date | Jun 11, 2019 |
| Priority date | — |
| Expiry date | Jan 10, 2035 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/033
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
In one implementation, a system for risk scoring a software application includes a component score engine to calculate an impact component score and a likelihood component score for a security vulnerability during development of the software application based on a plurality of scored descriptions of security risk elements for the software application. In addition, the system includes a total risk score engine to calculate a total security risk score for the software product application on the impact component score and the likelihood component score for the security vulnerability of the software application. In addition, the system includes a risk characterization engine to assign a risk characterization to the software product based on where the total risk score falls within a predetermined scale.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.