Global variable security analysis
US8656496B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Nov 22, 2010 |
| Grant date | Feb 18, 2014 |
| Priority date | — |
| Expiry date | May 29, 2031 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/034
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A method includes determining selected global variables in a program for which flow of the selected global variables through the program is to be tracked. The selected global variables are less than all the global variables in the program. The method includes using a static analysis performed on the program, tracking flow through the program for the selected global variables. In response to one or more of the selected global variables being used in security-sensitive operations in the flow, use is analyzed of each one of the selected global variables in a corresponding security-sensitive operation. In response to a determination the use may be a potential security violation, the potential security violation is reported. Apparatus and computer program products are also disclosed.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.