Patent ID: 11907378
Assignee: VIRSEC SYSTEMS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 10:
11. A system for assessing security vulnerability of an application, the system comprising:
a processor; and
a memory with computer code instructions stored thereon, the processor and the memory, with the computer code instructions, being configured to cause the system to:
run one or more static analysis tools on the application to generate a static vulnerability report;
run one or more dynamic analysis tools on the application to generate a dynamic vulnerability report;
decompile code of the application to identify code of the application that accepts user input;
determine one or more vulnerabilities of the application using the identified code of the application that accepts user input;
generate a vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input; and
generate a final static vulnerability report and a final dynamic vulnerability report based on (i) the static vulnerability report, (ii) the dynamic vulnerability report, and (iii) the generated vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input, wherein the final static vulnerability report and the final dynamic vulnerability report enable remediating vulnerabilities of the application.