Patent ID: 9727734
Date: 2017-08-08
CPC Classifications: G06F

Claim:
1. A method of customizing a security report, the method comprising: performing, by a security analysis application executed by a processor, a static analysis of a computer program and, during the static analysis, generating, by the security analysis application, a control flow graph representing a model of data flow of the computer program and assigning respective edge weights to edges of a plurality of paths in the control flow graph; limiting an amount of processing resources allocated to processing a uniform-cost search method by dynamically configuring, by the security analysis application, a size of the uniform-cost search method based on a size of the control flow graph, dynamically configuring the size of the uniform-cost search method based on the size of the control flow graph comprising identifying edges assigned greatest edge weights and limiting the uniform-cost search method to consider only those paths that include the edges assigned the greatest edge weights; determining, using the uniform-cost search method executed by the processor, a total edge weight for the considered paths, the total edge weight for a considered path being a sum of the edge weights assigned to the respective edges of the considered path; identifying at least one path of the considered paths in the control flow graph whose total edge weight satisfies a particular total edge weight criteria; updating the control flow graph to indicate to the user the at least one path in the control flow graph whose total edge weight satisfies the particular total edge weight criteria; and presenting, on a display, the updated control flow graph to the user as a customized security report that facilitates identification of security vulnerabilities in the computer program.