Patent ID: 8539593

Claim:
A method comprising: receiving with a processor a source code; identifying with the processor a data structure access in the source code, wherein the data structure access (Access i ) is defined as AST:=type name(- >field)*| global variable; wherein, AST is an Abstract Syntax Tree; determining whether the data structure access is associated with a security check function; defining the data structure access as a security sensitive operation responsive to determining that the data structure access is associated with the security check function; and defining a security specification to include the security check function and the security sensitive operation, wherein the determining whether the data structure access is associated with a security check function is defined by the function: ∀InstanceOf(Op i ) u , ∃InstanceOf(Check i ) v , such that InstanceOf(Op i ) v < protected InstancOf(Check i ) v =>Op i < protected Check i , wherein Op i is the security sensitive operation and Check n is the security check function.