Patent ID: 8844043
Filing Date: 2014-09-23
Classification: G06F

Abstract:
1. A method for detecting a presence of at least one vulnerability in a software application, the method comprising: modifying instructions of the software application to instrument a method by: storing the action snapshot of with other stored action snapshots generated by the at least one monitor during execution of the software application whenever the instrument method is invoked; analyzing, from within the same software application, the stored action snapshots; based on the analysis, detecting the presence of at least one vulnerability in the software application, each of the at least one vulnerability defined by a particular security rule to identify a vulnerable data or control flow pattern of the unparsed binary instructions, the vulnerable data or control flow pattern rendering the software application more likely to perform actions unintended by the software application when executed by the same one or more processors; and reporting the presence of the at least one vulnerability in the software application as detected based on the analysis of the stored action snapshots.