Patent ID: 9680859
Date: 2017-06-13
CPC Classifications: G06F,H04L

Claim:
1. A method, comprising: extracting views from an application program, where at least some extracted views comprise at least one view component; presenting the extracted views to a user; in response to the user selecting a view component in a presented extracted view, presenting a form to the user having a plurality of vulnerability types indicated for the selected view component and, for each vulnerability type, providing an ability for the user to set an indicator in the form to indicate whether the view component is at least one of a source or a sink; saving the form containing the user's input in conjunction with a user-provided label for the selected view component and a unique identification of the selected view component; and deriving an analysis policy configuration from the saved form that is formatted for use by a program security analyzer; where extracting views comprises recording, for each user interface component in an extracted view, a geometrical shape and coordinates of the component.