Patent · US Active

System and method for information flow analysis of application code

US11514172B2 · kind B2 · utility

3Cited by

5References

20Claims

0Family size

Assignee

Grabango Co. · US

Inventors

Fabian Yamaguchi · Berlin, DE
Markus Lottmann · Berlin, DE
Niko Schmidt · Berlin, DE
Vlad A Ionescu · Redwood City, US
Chetan Conikee · Santa Clara, US

Key dates

Filing date	Nov 15, 2019
Grant date	Nov 29, 2022
Priority date	—
Expiry date	Aug 3, 2040

Classification

Technology area (CPC G)Physics
CPC primaryG06F2221/033
WIPO fieldComputer technology
WIPO sectorElectrical engineering

Abstract

A method and system for security flow analysis of application code comprising: detecting data flows in a code base; and extracting an information flow, comprising determining a primary data flow by identifying a data flow that contains exposed data, and extending the primary data flow through descriptor data flows, wherein the descriptor data flows are associated with the set of data tracked by the primary data flow; wherein the information flow is a high level flow description that exposes the application code vulnerabilities based on the primary data flow and all associated descriptor data flows.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.