Patent ID: 11860679
Assignee: ORACLE INTERNATIONAL CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 16:
17. A method for detecting a security vulnerability in code, comprising:
sending a target query in the code to a query analyzer configured to perform:
obtaining (i) a permitted information flow graph for a permitted query and (ii) a target information flow graph for the target query,
determining, by traversing the permitted information flow graph, a permitted information flow comprising a plurality of permitted disclosed columns, a plurality of permitted accessed columns, and a permitted predicate,
determining, by traversing the target information flow graph, a target information flow comprising a plurality of target disclosed columns, a plurality of target accessed columns, and a target predicate,
comparing the permitted information flow and the target information flow to obtain a comparison result,
making a determination, based on the comparison result, that the target query comprises the security vulnerability, and
transmitting the determination that the target query comprises the security vulnerability; and

receiving, from the query analyzer, the determination that the target query comprises the security vulnerability.