Patent ID: 11941115
Assignee: BANK OF AMERICA CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 17:
18. The non-transitory computer-readable medium of claim 15, wherein the instructions, when executed by the hardware processor, further cause the processor to:
determine that the machine learning clustering algorithm grouped both the source code fingerprint corresponding to a third source code segment and the source code fingerprint corresponding to a fourth source code segment into a second cluster of the plurality of clusters, wherein:
a plurality of vulnerability findings for the third source code segment were generated through SAST of the third source code segment; and
a plurality of vulnerability findings for the fourth source code segment were generated through SAST of the fourth source code segment; and

in response to determining that the machine learning clustering algorithm grouped both the source code fingerprint corresponding to the third source code segment and the source code fingerprint corresponding to the fourth source code segment into the second cluster:
store, as a first vulnerability grouping:
the third source code segment coupled to the plurality of vulnerability findings for the third source code segment; and
the fourth source code segment coupled to the plurality of vulnerability findings for the fourth source code segment; and

apply a second machine learning algorithm to the first vulnerability grouping, the second machine learning algorithm configured to classify each vulnerability finding of the plurality of vulnerability findings for the third source code segment and the plurality of vulnerability findings for the fourth source code segment as at least one of a false positive and a real vulnerability.