Accenture Global Solutions Limited

Mehdi Sanoh

Ganesh Devarajan

Karel Kohout

Finbarr S Tarrant

Richard Levine

Owen McGauley

Sidath Handurukande

David Glyn Darkin

Systems and methods are provided for the classification of identified security vulnerabilities in software applications, and their automated triage based on machine learning. The disclosed system may generate a report listing detected potential vulnerability issues, and extract features from the report for each potential vulnerability issue. The system may receive policy data and business rules, and compare the extracted features relative to such data and rules. The system may determine a token based on the source code of a potential vulnerability issue, and a vector based on the extracted features of a potential vulnerability issue and based on the token. The system may select a machine learning modelling method and/or an automated triaging method based on the vector, and determine a vulnerability accuracy score based on the vector using the selected method.

Systems and methods for triaging software vulnerabilities

Growing community of inventors

Dublin, Ireland

Mehdi Sanoh