Patent Document ID: 9870485
Application ID: 14939366

Base Claim:
1. A method for detecting sensitive user input leakages in a software application comprising the steps of: parsing a user interface (UI) layout file of the software application to identify input fields; obtaining information concerning the input fields from the UI layout file; identifying the input fields that include sensitive information and generating a list of sensitive input fields; performing a taint analysis based on the list of sensitive input fields, wherein the step of performing a taint analysis comprises the step of identifying widget variables for sensitive input fields and associating the widget variables with corresponding UI layouts in order to avoid duplicate widgets; detecting information leaks in the sensitive input fields; and notifying a user of the information leaks in the sensitive input fields to avoid use of the software application by the user.

---

Claim 6:
6. The method as recited in claim 1 , wherein the step of identifying input fields that include sensitive information comprises the steps of: analyzing attributes of the input fields; reviewing hints associated with the input fields and comparing the hints with a sensitive keyword database; and analyzing text labels for an input field and comparing the text labels with the sensitive keyword database.