Patent ID: 11941115
Assignee: BANK OF AMERICA CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 8:
9. The method of claim 8, further comprising:
determining that both the source code fingerprint corresponding to a third source code segment and the source code fingerprint corresponding to a fourth source code segment belong to a second cluster of the plurality of clusters, wherein:
the third source code segment is associated with a second vulnerability finding generated through SAST of the third source code segment, the second vulnerability finding classified as a false positive by the external review; and
the fourth source code segment is associated with a third vulnerability finding generated through SAST of the fourth source code segment; and

in response to determining that the source code fingerprint corresponding to the third source code segment and the source code fingerprint corresponding to the fourth source code segment belong to the second cluster of the plurality of clusters:
determining that the third vulnerability finding matches the second vulnerability finding; and
in response to determining that the third vulnerability finding matches the second vulnerability finding, classifying the third vulnerability finding as the false positive.