Patent ID: 9317695
Filing Date: 2016-04-19
CPC Classification: G06F,H04L

Claim Text:
1. A method for automatically remedying security flaws, the method comprising the steps of: receiving in memory a static binary analysis report for a binary file corresponding to an application, the report identifying a security flaw in a section of the binary file; identifying, by a processor, based on, at least in part, the received report, the section of the binary file that corresponds to the security flaw, the identified section comprising a first binary code segment providing a functionality in an unsecure manner; locating a matching binary patch comprising a second binary code segment providing functionality in a secure manner and matching the functionality provided by the first binary code segment in the identified section, in a library of patches, wherein at least one of: (i) the functionality provided by the matching binary patch comprises the functionality provided by the first binary code segment; and (ii) the functionality provided by the first binary code segment comprises the functionality provided by the matching binary patch; determining whether replacing within the binary file the identified section with the matching binary patch would result in a change in a function of the binary file; if no change in the function is determined to occur, replacing within the binary file the identified section with the matching patch; and otherwise generating a notification that the replacement would change the function.