Patent ID: 11860679
Assignee: ORACLE INTERNATIONAL CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method for detecting a security vulnerability in code, comprising:
obtaining (i) a permitted information flow graph for a permitted query and (ii) a target information flow graph for a target query in the code;
determining, by traversing the permitted information flow graph, a permitted information flow comprising a plurality of permitted disclosed columns, a plurality of permitted accessed columns, and a permitted predicate;
determining, by traversing the target information flow graph, a target information flow comprising a plurality of target disclosed columns, a plurality of target accessed columns, and a target predicate;
comparing the permitted information flow and the target information flow to obtain a comparison result; and
determining, based on the comparison result, that the target query comprises the security vulnerability.