Patent ID: 8935795
Filing Date: 2015-01-13
Classification: G06F,H04L

Abstract:
1. A computer-implemented method comprising: building, by one or more computing devices, a graphical representation of a portion of a computer program, wherein the graphical representation includes a plurality of control flow edges; identifying, by the one or more computing devices, a potentially vulnerable data flow associated with at least one of the plurality of control flow edges, including: assigning, by the one or more computing devices, a control flow weight to each of the plurality of control flow edges, based upon, at least in part, identifying the potentially vulnerable data flow, including determining a number of the one or more sink statements that are associated with the control flow edge based upon, at least in part, the backward transitive closure, wherein the control flow weight indicates how likely the potentially vulnerable data flow associated with the control flow edge implicates a security issue, wherein a control flow edge associated with a serious potential vulnerability is assigned a larger control flow weight than other control flow edges; and applying, by the one or more computing devices, a security analysis to the portion of the computer program based upon, at least in part, the control flow weight.