System and method for vulnerability detection in computer code
US11880470B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Oct 4, 2021 |
| Grant date | Jan 23, 2024 |
| Priority date | — |
| Expiry date | Jun 23, 2042 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/033
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A method, computerized apparatus and computer program product, the method comprising: obtaining user code; obtaining an indication of at least one vulnerability, the vulnerability associated with one or more sets comprising at least a first instruction type and a second instruction type; scanning the code using dependency analysis, to obtain for one set: one or more first instructions of the first instruction type, one or more second instructions of the second instruction type, and further instructions associated with entities relevant to the first instruction and the second instruction; eliminating instructions other than the first instruction, the second instruction and one of the further instructions, thereby obtaining a collection of instructions that behaves differently from the user code; and providing the collection of instructions for vulnerability detection.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.