Patent ID: 9544327
Date: 2017-01-10
CPC Classifications: G06F,G06N,H04L

Claim:
1. A method to reduce security vulnerabilities associated with development of an application across multiple application development environments, the application having a set of application programming interfaces (APIs), comprising: receiving, at a first time, a static scan of a first set of source code from the application, the static scan including one or more identified vulnerabilities; receiving, at a second time, a static scan of a second set of source code from the application; based on the static scans, identifying one or more APIs as being in common use in the application; with respect to at least common use API so identified, identifying at least one API in the second set of source code that, with respect to the first set of source code, has been updated between the first time and the second time to address a vulnerability; and based on identifying the at least one API that has been updated, prioritizing processing of one or more of the identified vulnerabilities in an API associated with the first set of source code over vulnerabilities identified in at least one other API.