Patent · US Active

Method for detecting vulnerabilities in software

US11669623B2 · kind B2 · utility

0Cited by

1References

10Claims

0Family size

Assignee

Virtual Forge GmbH · DE

Inventors

Hans-Christian Esperer · Heidelberg, DE
Yun Ding · Heidelberg, DE
Thomas Kastner · Kersey, US
Markus Schumacher · Buxtehude, DE

Key dates

Filing date	Jan 25, 2021
Grant date	Jun 6, 2023
Priority date	—
Expiry date	Aug 29, 2041

Classification

Technology area (CPC G)Physics
CPC primaryG06F2221/033
WIPO fieldComputer technology
WIPO sectorElectrical engineering

Abstract

A method, an apparatus, and a storage medium for detecting vulnerabilities in software to protect a computer system from security and compliance breaches are provided. The method includes providing a ruleset code declaring programming interfaces of a target framework and including rules that define an admissible execution context when invoking the programming interfaces, providing a source code to be scanned for vulnerabilities; compiling the source code into a first execution code having additional instructions inserted to facilitate tracking of an actual execution context of the source code, compiling the ruleset code into a second execution code that can be executed together with the first execution code, executing the first execution code within an virtual machine and passing calls of the programming interfaces to the second execution code, and detecting a software vulnerability when the actual execution context disagrees with the admissible execution context.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.