Patent ID: 11907378
Assignee: VIRSEC SYSTEMS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A computer-implemented method of assessing security vulnerability of an application, the method comprising:
running one or more static analysis tools on the application to generate a static vulnerability report;
running one or more dynamic analysis tools on the application to generate a dynamic vulnerability report;
decompiling code of the application to identify code of the application that accepts user input;
determining one or more vulnerabilities of the application using the identified code of the application that accepts user input;
generating a vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input; and
generating a final static vulnerability report and a final dynamic vulnerability report based on (i) the static vulnerability report, (ii) the dynamic vulnerability report, and (iii) the generated vulnerability report indicating the one or more vulnerabilities of the application determined using the identified code of the application that accepts user input, wherein the final static vulnerability report and the final dynamic vulnerability report enable remediating vulnerabilities of the application.