Patent ID: 11860679
Assignee: ORACLE INTERNATIONAL CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 8:
9. A system for detecting a security vulnerability in code, comprising:
a repository configured to store:
a permitted information flow graph,
a target information flow graph for a target query in the code,
a permitted information flow comprising a plurality of permitted disclosed columns, a plurality of permitted accessed columns, and a permitted predicate, and
a target information flow comprising a plurality of target disclosed columns, a plurality of target accessed columns, and a target predicate;

a computer processor; and
a query analyzer executing on the computer processor configured to:
determine, by traversing the permitted information flow graph, the permitted information flow,
determine, by traversing the target information flow graph, the target information flow,
compare the permitted information flow and the target information flow to obtain a comparison result, and
determine, based on the comparison result, that the target query comprises the security vulnerability.