Patent ID: 11874932
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 9:
10. A computer system for managing security vulnerabilities in a computer application, the computer system comprising:
a memory medium comprising program instructions;
a bus coupled to the memory medium; and
a processor, for executing the program instructions, that when executing the program instructions causes the system to:
provide each of a plurality of code entities of an application with an enabled state in which a code entity is permitted to run responsive to being called and a disabled state in which the code entity is prevented from being run responsive to being called and instead performs a back-out behavior; and
provide the application with a security risk manager operable to:
query a security vulnerabilities database for security alerts relevant to the plurality of code entities;
responsive to detecting a relevant security alert, identify one or more affected code entities of the plurality of code entities which are affected by the detected relevant security alert;
determine a severity of the detected relevant security alert and a corresponding disablement time threshold according to which the one or more affected code entities are to be disabled; and
automatically change the identified one or more affected code entities of the plurality of code entities to the disabled state responsive to the detected security alert being older than an age indicated by the corresponding disablement time threshold.