Patent Document ID: 9275232
Application ID: 14276218
Patent Status: 1

Claim One:
1. A method for evaluating a source code scanner, the method comprising: determining, by a code evaluation computing device, control flow and data flow in source code; inserting, by the code evaluation computing device, one or more exemplary code snippets or one or more irregular code snippets into one or more areas in the source code comprising one or more critical functional areas in the source code to produce modified source code, wherein the one or more critical functional areas in the source code are based on the determined control flow and data flow; sending, by the code evaluation computing device, the modified source code to a source code scanner for analysis; obtaining, by the code evaluation computing device, an issue list, generated by the source code scanner after the source code scanner has analyzed the modified source code, wherein the issue list comprises code segments comprising security defects identified by the source code scanner, reasons for the security defects, and locations of the security defects in the modified source code; comparing, by the code evaluation computing device, the code segments in the issue list to the one or more exemplary code snippets or the one or more irregular code snippets; and generating, by the code evaluation computing device, a plurality of metrics, indicating quality of the source code scanner, based on the comparison.