International Business Machines Corporation

Mathieu Merineau

Jeffrey Charles Turnham

John Thomas Peyton, Jr

Babita Sharma

Jason N Todd

Ettore Merlo

A computer-implemented method for security scanning application code includes executing, via a processor, a full scan of the application code and generating a program intermediate representation (IR) and a list of security findings determined by the full scan. The processor executes an incremental scan of the application code after at least one change to the application code, and identifies at least one changed file in the application code. The processor then generates an incremental intermediate representation (IR) based at least in part on the at least one changed file. The processor merges the saved scan state and the incremental IR, produces a merged scan state, and outputs security findings based at least in part on the merged scan state and the incremental IR.

Growing community of inventors

Laval, Canada

Mathieu Merineau