International Business Machines Corporation

Other

Jason N Todd

Kristofer Alyn Duer

John Thomas Peyton, Jr

Babita Sharma

Shu Wang

Stephen Darwin Teilhet

John Peyton

Lin Tan

David E Stewart

Jeffrey Charles Turnham

Jinqiu Yang

Ettore Merlo

Johnathan D Smith

Mathieu Merineau

Jinqui Yang

A computer-implemented method includes obtaining, by a processor, existing security information for static application security testing (SAST). The method also includes using, by the processor, the existing security information to discover, by a machine capable of learning, new security information. The method also includes improving, by the processor, security of a computer using the new security information.

Applying machine learning techniques to discover security impacts of application programming interfaces

A computer-implemented method for security scanning application code includes executing, via a processor, a full scan of the application code and generating a program intermediate representation (IR) and a list of security findings determined by the full scan. The processor executes an incremental scan of the application code after at least one change to the application code, and identifies at least one changed file in the application code. The processor then generates an incremental intermediate representation (IR) based at least in part on the at least one changed file. The processor merges the saved scan state and the incremental IR, produces a merged scan state, and outputs security findings based at least in part on the merged scan state and the incremental IR.

Scan time reduction in application code security scanning

A source code processing application may process source code and realize the results of the code in a map configuration. In one example, the map may be displayed with a number of stations and pathways between the stations to illustrate associations with classes of the source code. An example method of operation may include one or more of retrieving source code comprising a class from memory, processing the source code to identify an error associated with the class, creating a map with a station linked to the error, and displaying the map on a device.

Visualization of security warning solution points

Portable mirror

Growing community of inventors

Lunenburg, MA, United States of America

Jason N Todd