Patent Document ID: 20180176245
Application ID: 15387012
Patent Flag: 0

Claim One:
1. A method of detecting shared vulnerable code comprising the steps of: creating a consolidated vulnerability database populated with vulnerability testing results of a plurality of applications; comparing at least one of the filename, the line number, and the line text associated with each vulnerability within the consolidated vulnerability database to the filename, line number, and line text associated with every other vulnerability within the consolidated vulnerability database and recording any filename, line number, and line text matches as vulnerability location matches; comparing the number of data/control flow elements of each of the plurality of applications to the number of data/control flow elements of every other of the plurality of applications and recording any matches as data/control flow element matches; assigning a confidence to each vulnerability within the consolidated vulnerability database based on vulnerability location matches and data/control flow element matches. assigning a severity to each vulnerability within the consolidated vulnerability database; assigning a criticality to each of the plurality of applications; and creating a database of risk-ranked, confidence-scored vulnerabilities based on the confidence assigned to each vulnerability, the severity of each vulnerability, and the criticality of each application.