Patent Document ID: 20150332053
Application ID: 14276218
Patent Status: 0

Claim One:
1. A method for evaluating a source code scanner, the method comprising: obtaining, by a processor, source code; inserting, by the processor, one or more good code snippets and one or more bad code snippets into the source code to obtain a modified source code; obtaining, by the processor, an issue list, generated by the source code scanner upon scanning the modified source code, wherein the issue list comprises code segments having security defects identified by the source code scanner, reasons for the security defects, and locations of the security defects in the modified source code; comparing, by the processor, the code segments, present in the issue list, with the one or more good code snippets and the one or more bad code snippets; and generating, by the processor, a plurality of metrics, indicating quality of the source code scanner, based on the comparison.