Patent ID: 11928221
Assignee: BANK OF AMERICA CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 5:
6. The system of claim 1, wherein:
the plurality of source code segments further comprises a third source code segment;
the memory is further configured to store a third plurality of vulnerability findings for the third source code segment, the third plurality of vulnerability findings generated through SAST of the third source code segment; and
the hardware processor is further configured to:
determine that the source code fingerprint corresponding to the third source code segment matches the source code fingerprint corresponding to the first source code segment; and
in response to determining that the source code fingerprint corresponding to the third source code segment matches the source code fingerprint corresponding to the first source code segment:
automatically classify a first vulnerability finding of the third plurality of vulnerability findings as the real vulnerability, in response to determining that the first vulnerability finding of the third plurality of vulnerability findings matches the first vulnerability finding of the first plurality of vulnerability findings; and
automatically classify a second vulnerability finding of the third plurality of vulnerability findings as the false positive, in response to determining that the second vulnerability finding of the third plurality of vulnerability findings matches the second vulnerability finding of the first plurality of vulnerability findings.