Patent ID: 9519789
Filing Date: 2016-12-13
CPC Classification: G06F

Claim Text:
1. A method for identifying security vulnerabilities related to inter-process communications, the method comprising: identifying within the instructions of a computer software application an object creation location configured to create an inter-process communications object; identifying within the instructions of the computer software application a location of an inter-process communications method; determining whether a path exists for an inter-process communications object created at the object creation location to propagate to the inter-process communications method; classifying with a classification selected from a plurality of predefined classifications, any of the inter-process communications object, the object creation location, and the location of the inter-process communications method; and reporting as a security vulnerability the classified inter-process communications object, object creation location, or location of the inter-process communications method if the path exists and if the classification is predefined to indicate that reporting is warranted, wherein the identifying and determining steps are performed using static analysis of the instructions of the computer software application, the reporting comprises reporting a severity of the security vulnerability that is indicated by the classification, wherein the predefined classifications indicate different severities.