Patent ID: 8332939

Claim:
A method for identifying subject-executed code and subject-granted access rights within a program, the method further comprising the steps of: constructing a static model of a program with a processor, wherein the static model comprises: an invocation graph (G=(N, E)), the invocation graph comprising a set of nodes (N) and a set of edges (E), the invocation graph being configured to visually represent programming methods as nodes, and the calling context that is associated with a respective programming method; and a points-to graph ( G = P ,Ē), where P is a set of permission objects, the points-to graph being configured to model the dependencies that exist between program objects; determining a set of access rights that are associated with each subject object that is comprised within the program; annotating the invocation graph with the set of access right data to generate a subject-rights analysis, wherein each node comprised within the invocation graph is mapped to a set of access rights that represent subject-granted access rights under which a method that corresponds to a respective node will be executed; and utilizing the subject-rights analysis to perform a subject-rights analysis of the program.