PATENT CLAIM ANALYSIS

Application Number: 16036396
Application Type: Utility
Filing Date: 2018-07
Publication Date: 2019-05
Patent Classification: ["726", "025000"]

Abstract:
Provided are a binary vulnerability analysis method performed by a computing device is provided, and the binary vulnerability analysis method includes a primary execution step of recording a symbolic constraint of a vulnerability associated with an execution flow path causing a crash to a target binary to be analyzed and a suspicious element on the execution flow path by performing taint analysis through a primary execution of the target binary; and a secondary execution step of performing a secondary execution, which is a symbolic execution, on the execution flow path and, if an instruction satisfying the symbolic constraint is found, determining that the vulnerability exists in the target binary by comparing the suspicious element and the found instruction.

Claim (Index 1):
A binary vulnerability analysis method performed by a computing device, the binary vulnerability analysis method comprising:\n a primary execution step of recording a symbolic constraint of a vulnerability associated with an execution flow path causing a crash to a target binary to be analyzed and a suspicious element on the execution flow path by performing taint analysis through a primary execution of the target binary; and a secondary execution step of performing a secondary execution after the primary execution step, which is a symbolic execution, on the execution flow path and, if an instruction satisfying the symbolic constraint recorded in the primary execution step is found, determining that the vulnerability exists in the target binary by comparing the suspicious element and the found instruction, wherein the primary execution step includes performing the primary execution using an execution parameter for executing the target binary and setting a taint source for the taint analysis using the execution parameter, and wherein setting the taint source comprises setting a loading location of the execution parameter during the primary execution as the taint source if \u201cmain\u201d does not exist in a debug symbol of the target binary.

Metadata:
- Claim Count in Document: 32.0
- Percentile: 95.0
- Lexical Diversity: 2.31481
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: True
- Related Applications: ['13481248', '14827522', '13898824', '15817372', '11529796']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2860769616586313
- 35 USC 102 Novelty (BERT): 0.4868868215120218
- Combined Prediction Score: 0.3061579476439704
- Mean Citation Score: 206.28468
- Max Citation Score: 220.55055
- Similarity Product: 161.18412015592753

Labels:
- Claim Label 101: 0
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 0
- Label 101 Adjusted: 0

Dataset: test