Patent Document ID: 9519788
Application ID: 13860336
Patent Status: 1

Claim One:
1. A system for identifying security vulnerabilities related to inter-process communications, the system comprising: a hardware processor including: a scanner configured to: identify within the instructions of a computer software application an object creation location configured to create an inter-process communications object, identify within the instructions of the computer software application a location of an inter-process communications method, determine whether a path exists for an inter-process communications object created at the object creation location to propagate to the inter-process communications method; and a classifier configured to classify with a classification selected from a plurality of predefined classifications, any of the inter-process communications object, the object creation location, and the location of an inter-process communications method, and report as a security vulnerability the classified inter-process communications object, object creation location, or location of the inter-process communications method if the path exists and if the classification is predefined to indicate that reporting is warranted, wherein the scanner is configured to perform static analysis of the instructions of the computer software application to identify the inter-process communications object, the object creation location, and the location of the inter-process communications method, and determine whether the path exists, and the classifier is configured to report a severity of the security vulnerability that is indicated by the classification, wherein the predefined classifications indicate different severities.