Patent ID: 8539449

Claim:
A device for inspecting software for vulnerabilities, comprising: a processor; a target function selecting module for selecting a function of the software for vulnerabilities to be intensively fuzzed from among all functions of the software, wherein the selection of the function is made by at least one of a user's input through a user interface and a predefined selection algorithm; a comparison file generating module for generating a first file comprising the selected function and a second file not comprising the selected function, wherein after selecting the function of the software, then generating the first file comprising the selected function; after generating the first file, then generating the second file not comprising the selected function, wherein the second file is generated immediately after the first file, wherein immediately after generating the first file and the second file, then generating binary values of the first file and the second file; a binary pattern comparing module for detecting a changed or added binary pattern by comparing the binary values of the first file and the second file, and wherein the first file and the second file are configured to be directly received by the binary pattern comparing module after the first file and the second file has been generated; a test case generating module for generating at least one test case based on the detected binary pattern; and a vulnerability verifying module for inspecting vulnerabilities based on the at least one test case and generating a vulnerability inspection result.