Patent Document ID: 20130227695
Application ID: 13533407
Patent Flag: 0

Claim One:
1. A computer implemented method executed by one or more computing devices for fixing one or more application vulnerabilities, comprising: identifying the one or more application vulnerabilities through a first dynamic security assessment and a static security assessment of an application; fixing at least one vulnerability instance reported in the static security assessment based on a standard secure coding practice; running a plurality of dynamic security assessments to identify a number of one or more vulnerability instances reported in the first dynamic security assessment are fixed by fixing the at least one vulnerability instance reported in the static security assessment; identifying one or more vulnerability instances reported in the plurality of dynamic security assessments corresponding to the at least one vulnerability instance reported in the static security assessment by correlating one or more results of the plurality of dynamic security assessments and the static security assessment; determining a shortest path to fix the one or more application vulnerabilities in the event of the one or more vulnerability instances reported in the plurality of dynamic security assessments corresponding to two or more vulnerability instances reported in the static security assessment; and fixing the one or more application vulnerabilities based on the correlation of the plurality of dynamic security assessments and the static security assessment for the one or more application vulnerabilities and the shortest path to fix the one or more application vulnerabilities.