Patent Document ID: 9465942
Application ID: 14459037

Base Claim:
1. A computer-implemented method, comprising: identifying a plurality of strings in a document that includes source code of at least a portion of a software module, the source code described in a programming language, the identifying of the plurality of strings comprising searching the document for individual ones of the plurality of strings that are delimited by one or more string delimiter characters designated by the programming language; determining an information entropy associated with the individual ones of the plurality of strings; incorporating the individual ones of the plurality of strings with the information entropy at least equal to a threshold information entropy into a dictionary; during execution of the software module, performing a dictionary attack on one or more secure features of the software module using the dictionary, the dictionary attack including providing one or more strings of the plurality of strings as a set of test credentials for requesting access to the one or more secure features; determining that the providing of the one or more strings enables the access to the one or more secure features of the software module; designating the one or more strings as one or more credentials written into the source code; and sending a notification describing the one or more credentials written into the source code.

---

Claim 2:
2. The method of claim 1 , wherein: the identifying of the plurality of strings is further based on determining a context for the individual ones of the plurality of strings in the document; the context includes an association between a string and an identification of a host device on which the software module is executable, the association including one or more of: a proximity of the string to the identification of the host device in the source code; or the string being included in a parameter passed to a portion of the source code that references the identification of the host device; and the identification of the host device includes one or more of: a Uniform Resource Identifier (URI); a network address; a media access control (MAC) address; a unique device identifier; or a hostname.