Patent ID: 11899800
Assignee: VERACODE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method comprising:
invoking k-fold cross validation to train and test a set of classifiers and program code to train a logistic regression model with probability vectors from the set of classifiers generated from the k-fold cross validation;
inputting a software development artifact derived vector to an ensemble of the trained set of classifiers and the trained logistic regression model,
wherein the trained set of classifiers generates a set of probabilities that a software component identified by the software development artifact from which the vector is derived has a vulnerability or flaw,
wherein the ensemble generates a probability that the software component has a vulnerability or flaw based on fitting a linear combination of the set of probabilities to the trained logistic regression model; and

updating a database with the probability generated from the ensemble in association with identity of the software component.