Patent ID: 11941115
Assignee: BANK OF AMERICA CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 1:
2. The system of claim 1, wherein:
the plurality of source code segments further comprises a third source code segment and a fourth source code segment;
the memory is further configured to store:
a vulnerability finding for the third source code segment, the vulnerability finding for the third source code segment generated through SAST of the third source code segment and classified as a false positive by the external review; and
a vulnerability finding for the fourth source code segment, the vulnerability finding for the fourth source code segment generated through SAST of the fourth source code segment;

the hardware processor is further configured to:
determine that both the source code fingerprint corresponding to the third source code segment and the source code fingerprint corresponding to the fourth source code segment belong to a second cluster of the plurality of clusters; and
in response to determining that both the source code fingerprint corresponding to the third source code segment and the source code fingerprint corresponding to the fourth source code segment belong to the second cluster of the plurality of clusters:
determine that the vulnerability finding for the third source code segment matches the vulnerability finding for the fourth source code segment; and
in response to determining that the vulnerability finding for the third source code segment matches the vulnerability finding for the fourth source code segment, classify the vulnerability finding for the fourth source code segment as the false positive.