Patent Document ID: 9507945
Application ID: 14242028

Base Claim:
1. A cloud based architecture for automated vulnerability identification demonstration comprising: distributed cloud processing circuitry including a plurality of processors configured to execute instructions for: receiving a program and employing a disassembler to disassemble the program; generating a function call tree for the program based on disassembly of the program; receiving an indication of a post condition for which analysis of the program is desired; transforming program statements into logical equations; simplifying the logical equations; propagating each path of the function call tree, based on post conditions, backwards via Dijkstra's weakest preconditions variant; analyzing aliases and processing loops to generate a precondition, wherein analyzing aliases is performed using an “if-then-else” expression through a satisfiability modulo theories (STM) solver and processing loops comprises unrolling each of the loops of each path; using an automated solver to determine whether the precondition is realizable and, if so, providing program inputs required to realize the precondition; identifying code vulnerabilities of the program based on the provided program inputs, wherein the code vulnerabilities would allow an attacker to introduce and execute code on a computer executing the program; and generating analysis results including at least the identified code vulnerabilities, the analysis results being providable to a user, in an interactive tool, using a user interface.

---

Claim 6:
6. The cloud based architecture of claim 1 , wherein the processing circuitry is further configured for describing all possible aliasing combinations in a single expression.