Patent ID: 11941115
Assignee: BANK OF AMERICA CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 3:
4. The system of claim 1, wherein:
the database is further configured to store a third source code segment and a fourth source code segment;
the memory is further configured to store:
a plurality of vulnerability findings for the third source code segment generated through SAST of the third source code segment; and
a plurality of vulnerability findings for the fourth source code segment generated through SAST of the fourth source code segment;
the machine learning clustering algorithm grouped the source code fingerprint corresponding to the third source code segment and the source code fingerprint corresponding to the fourth source code segment into a second cluster of the plurality of clusters; and

the hardware processor is further configured to:
in response to determining that the machine learning clustering algorithm grouped the source code fingerprint corresponding to the third source code segment and the source code fingerprint corresponding to the fourth source code segment into the second cluster:
store, as a first vulnerability grouping:
the third source code segment coupled to the plurality of vulnerability findings for the third source code segment; and
the fourth source code segment coupled to the plurality of vulnerability findings for the fourth source code segment;

apply a second machine learning algorithm to the first vulnerability grouping, the second machine learning algorithm configured to classify each vulnerability finding of the plurality of vulnerability findings for the third source code segment and the plurality of vulnerability findings for the fourth source code segment as at least one of a false positive and a real vulnerability.