Bank of America Corporation

Mark Trenton Cimijotti

Timucin Ozugur

Robert A Lang

Travis E Hoyt

William Thomas Stranathan

Tyron Legette

Jack D Upchurch, Ii

A system for detecting and mitigating application security threats comprises a processor associated with a server. The processor executes a static security model to analyze a group of development code sets for an application to detect threat objects. The processor determines that a number of threat objects in each development code set is lower than a threshold. The processor further executes a run-time security model to analyze the combined code sets to determine a set of threat object measurements of application product releases for the application. The processor generates a set of threat change ratios per application based on a first threat object measurement and the threat object measurements after the first threat object measurement. The processor determines threat change patterns of the threat change ratios associated with the application product releases for the application. The processor determines whether to trigger a development security model for the application.

Detecting and mitigating application security threats based on threat change patterns

A system for detecting and mitigating application security threats comprises a processor associated with a server. The processor analyzes a group of code sets of an application and determines a number of the threat objects in each code set. The processor further executes a run-time security model to analyze a combined code sets to determine threat object measurements and false positive measurements of application product releases for the application. The processor determines threat threshold ratios and false positive ratios per application. The processor further generates an array of quartile weights corresponding to a set of quartile ranges of the threat threshold ratios and a set of quartile ranges of the false positive ratios associated with the application. The processor generates an adjusted object measurement for the application based on a corresponding quartile weight in the array. The processor determines whether to trigger a development security model for the application.

Detecting and mitigating application security threats based on quantitative analysis

A system and method for an optimization of fulfillment workflow includes receiving application data and determining that an application is in scope for vulnerability assessment based at least in part on the application data. Assessment information related to an assessment identifying at least one vulnerability is received from an assessor. The information regarding the assessment is communicated to a remediator. One or more remediation tasks designed to remedy the at least one vulnerability is received, and an indication of performance of a remediation task is received. An indication that a remediation task has been completed based at least in part on the indication of performance of the remediation task is communicated, and an indication of whether the remediation task remedied the at least one vulnerability is received.

Growing community of inventors

Monroe, NC, United States of America

Mark Trenton Cimijotti