Patent ID: 8701186

Claim:
A method, in a data processing system, for evaluating downgrader code in application code with regard to one or more security guidelines, comprising: identifying, by an application analysis mechanism of the data processing system, the downgrader code in application code, wherein the downgrader code is a portion of code in the application code that operates on an information flow of the application code to ensure confidentiality of information input to the downgrader code, in the output of the downgrader code; determining, by the application analysis mechanism, if the one or more processes of the downgrader code violate the one or more security guidelines, at least by evaluating the one or more processes of the downgrader code against one or more security guidelines; generating, by the application analysis mechanism, a notification in response to the evaluation indicating that the one or more processes of the downgrader code violate the one or more security guidelines; and outputting, by the application analysis mechanism, the notification.