Patent ID: 9172720
Filing Date: 2015-10-27
Classification: G06F,H04L

Abstract:
1. A method, comprising: gathering, by a computing device, one or more revision control logs, the one or more revision control logs identifying one or more code changes; determining, by the computing device, based on one or more risk factors, that at least one code change identified in the one or more revision control logs is potentially malicious; based on determining that the at least one code change is potentially malicious, generating, by the computing device, a notification indicating that the at least one code change is potentially malicious; after generating the notification regarding the at least one code change, receiving, by the computing device, data indicating whether the at least one code change is actually malicious; and dynamically modifying, by the computing device, at least one risk factor of the one or more risk factors based on the received data, wherein dynamically modifying the at least one risk factor of the one or more risk factors based on the received data comprises adjusting one or more weights assigned to the one or more risk factors to reduce a rate at which legitimate code changes are identified as potentially malicious, and wherein each revision control log of the one or more revision control logs includes one or more data tables that include records of each change made to a particular set of source code, the records identifying, for each change made to the particular set of source code, one or more lines of code associated with the change, a user who made the change, one or more applications affected by the change, one or more systems affected by the change, and a location of the code associated with the change.