Patent ID: 11941115
Assignee: BANK OF AMERICA CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 10:
11. The method of claim 8, further comprising:
determining that the machine learning clustering algorithm grouped the source code fingerprint corresponding to a third source code segment and the source code fingerprint corresponding to a fourth source code segment into a second cluster of the plurality of clusters, wherein:
a plurality of vulnerability findings for the third source code segment were generated through SAST of the third source code segment; and
a plurality of vulnerability findings for the fourth source code segment were generated through SAST of the fourth source code segment; and

in response to determining that the machine learning clustering algorithm grouped the source code fingerprint corresponding to the third source code segment and the source code fingerprint corresponding to the fourth source code segment into the second cluster:
storing, as a first vulnerability grouping:
the third source code segment coupled to the plurality of vulnerability findings for the third source code segment; and
the fourth source code segment coupled to the plurality of vulnerability findings for the fourth source code segment;

applying a second machine learning algorithm to the first vulnerability grouping, the second machine learning algorithm configured to classify each vulnerability finding of the plurality of vulnerability findings for the third source code segment and the plurality of vulnerability findings for the fourth source code segment as at least one of a false positive and a real vulnerability.