Patent ID: 9525698
Filing Date: 2016-12-20
CPC Classification: H04L

Claim Text:
1. A software assurance method for managing and prioritizing risk, comprising: receiving a data set from one or more analysis tools, wherein the data set is selected from the group consisting of software code and software applications, wherein the applications comprise mobile and web applications; executing the data set by a middleware application to analyze the data set for a presence of duplicates, including evaluating the analysis results for false positives, false negatives, and tool errors; removing duplicates, false positives, false negatives and results of tool errors from the data set by the middleware application, thus creating an input file; prompting a user to input risk management settings and preferences; comparing the created input file against a library of compliance standards which pertain to software assurance to identify a presence of any one of weaknesses, defects, bugs, flaws, vulnerabilities, and/or failures in the input file; mapping the created input file to Common Weakness Enumeration standards; creating a risk prioritization ranking based on the mapped results wherein risk prioritization includes assigning a value to each identified, compared and mapped weakness, vulnerability and failure representing a level of impact associated with the identified, compared and mapped weakness, vulnerability and failure; and generating at least one report based on the risk prioritization.