Patent ID: 8286250

Claim:
A computer-implemented method for determining a sensitive path in a control flow graph (CFG) of a browser extension, comprising: generating a CFG from a source code of the browser extension for determining a user information leak by the browser extension, wherein the CFG is particular to the programming language of the source code; identifying the sensitive path within the CFG, wherein the identifying further comprises: determining a sensitive source node within a plurality of nodes in the CFG, wherein the sensitive source node accesses information of a user on a computing device that executes the browser extension; determining a sensitive end node within the plurality of nodes in the CFG, wherein the sensitive end node accesses the network on the computing device that executes the browser extension to transmit the information of the user; and traversing the CFG to identify whether the sensitive path exists from the sensitive source node to the sensitive end node, wherein the existence of the sensitive path is an indication that the browser extension leaks information of a user over a network.