Patent Document ID: 10116681
Application ID: 15387012
Patent Flag: 1

Claim One:
1. A method of detecting and analyzing vulnerable code shared between at least two applications comprising the steps of: creating a consolidated vulnerability database populated with at least one vulnerability testing result from each of the at least two applications wherein in each vulnerability result comprises a vulnerability type, filename, line number, and data/control flow elements; identifying at least one shared vulnerability by: comparing a first vulnerability testing result with the remaining vulnerability testing results within the consolidated vulnerability database and recording any vulnerability type, filename and line number matches as vulnerability location matches; and comparing the number of data/control flow elements of the first vulnerability testing result with the remaining vulnerability testing results within the consolidated vulnerability database and recording any matches as data/control flow element matches; analyzing the at least one shared vulnerability by: assigning a confidence to the shared vulnerability based on the vulnerability location matches and the data/control flow element matches; assigning a severity to the shared vulnerability type; and assigning a criticality to each of the at least two applications from which the shared vulnerability originated from; and creating a database of shared vulnerabilities wherein each shared vulnerability is risk-ranked and confidence-scored based on the confidence, the severity, and the criticality.