Accenture Global Solutions Limited

Johnny Obando

Mário Lauande Lacroix

Karel Kohout

Richard Levine

Ganesh Devarajan

Navdeep Sharma

Finbarr S Tarrant

John Donovan Delmare, Jr

Gopal Kavanadala Sridhar

Jee Hyub Kim

Anton Plotnikov

Vidya Govindan

Dalton Harris

Steven Nicholas Strupp

Jason Widen

Matt Renzi Quillosa

Eanna Mulrooney

Finbarr Tarrant

Systems and methods are provided for the classification of identified security vulnerabilities in software applications, and their triage based on automated decision-tree triage and/or machine learning. The disclosed system may generate a report listing detected potential vulnerability issues, and automatically determine whether the potential vulnerability issues are exploitable using automated triage policies containing decision trees or by extracting vulnerability features from the report and processing the extracted vulnerability features using machine learning models.

Systems and methods for triaging software vulnerabilities

A device may receive contextual data, computational data, experiential data, and industry data associated with software code, and may receive detected vulnerabilities data identified by a scanning model based on the software code and software code metadata of the computational data. The device may process the contextual data, the computational data, and the experiential data, with a contextual identification model, to determine a set of rules and a set of actions, and may enrich, via an enrichment model, the industry data with the experiential data to generate enriched industry data. The device may process the software code metadata, the detected vulnerabilities data, and the enriched industry data, with a correlation model, to generate analysis data, and may process the analysis data and the set of rules, with a security model, to confirm security issues associated with the software code. The device may perform one of the set of actions based on the security issues.

Utilizing orchestration and augmented vulnerability triage for software security testing

Growing community of inventors

Cypress, TX, United States of America

Johnny Obando