Patent ID: 8528095
Filing Date: 2013-09-03
Classification: G06F

Abstract:
1. A computer system for injection context based static analysis of computer software applications, comprising: a sink selector configured to select a sink within a computer software application of the computer system, the sink comprising one or more lines of computer code within the computer software application, the one or more lines of code being bound to external data comprising a character output stream received from a data source that is external to the computer system, wherein said sink selector is configured to identify a sink type associated with said sink, the sink type comprising one of hypertext markup language (HTML), structured query language (SQL), and cross-site scripting; an output stream tracer configured to: a context action identifier configured to: wherein said sink selector, output stream tracer, and context action identifier are implemented in at least one of: a) computer hardware, and b) computer software embodied in a physically-tangible computer-readable storage medium.