Patent ID: 8806648

Claim:
A system for automatically classifying security vulnerabilities in computer software applications, the system comprising: a hardware processor configured to initiate executable operations comprising: identifying a plurality of candidate security vulnerabilities in a learning set including at least a first computer software application; classifying each of the plurality of candidate security vulnerabilities with any classification selected from a set of predefined classifications; determining, for each of the plurality of candidate security vulnerabilities, values for a plurality of predefined properties; creating, for each of the plurality of candidate security vulnerabilities, a set of correlations between the values for the plurality of predefined properties and the respective classification of the candidate security vulnerability; identifying a candidate security vulnerability in a second computer software application; determining, for the candidate security vulnerability in the second computer software application, values for the plurality of predefined properties; and classifying, using the set of correlations, the candidate security vulnerability in the second computer software application with a classification selected from the set of predefined classifications that best correlates with the values for the plurality of predefined properties of the candidate security vulnerability in the second computer software application.