Patent ID: 8528093

Claim:
A non-transitory computer readable storage medium, comprising executable instructions to: execute a dynamic analysis of target code to identify a first set of identified security issues, wherein each security issue in the first set of identified security issues includes a first security category, a complete Uniform Resource Locator (URL), and a first common parameter name; perform a static analysis of the target code to identify a second set of identified security issues wherein the first set of identified security issues are used to tailor the static analysis and wherein each security issue in the second set of identified security issues includes a second security category, a partial URL, and a second common parameter name; and compare the first set of identified security issues and the second set of identified security issues to report common identified security issues wherein common identified security issues include the first security category that matches the second category, the complete URL that matches the partial URL, and the first common parameter name that matches the second common parameter name.