Tata Consultancy Services Limited

Monika Sahu

Sachin Premsukh Lodha

Kumar Mansukhlal Vidhani

Harshal Tupsamudre

Ram Kumar

Harshal Tupasamudre

Several data breaches are occurring in organizations due to insecure handling security-sensitive data. Conventional methods utilize static analysis tools and fail to capture all security vulnerabilities. The present disclosure identifies a security vulnerability by analyzing a source code. Initially, a System Dependence Graph (SDG) associated with the source code is received. Forward slicing is performed on the SDG and a plurality of forward function nodes are obtained. A plurality of security parameters associated with the security-sensitive variable are obtained. A backward slicing is performed based on a plurality of security parameters to obtain a plurality of backward function nodes. Further, a plurality of common function nodes is obtained from the plurality of forward and the backward function nodes and utilized to generate a plurality of enumerated paths. The enumerated paths are evaluated to obtain a plurality of feasible paths and are further analyzed to identify security vulnerability.

Method and system for identifying security vulnerabilities

This disclosure relates generally to a method and system for extraction of SQL queries in an application. Various conventional approaches models SQL query extraction at a specific program point problem as an instance of string expression problem. Many string analysis based solutions are not scalable for large applications and those which are scalable do not account explicitly for the heap based flow. In an embodiment, the disclosed method and system utilizes a multi-criteria slicing based model which takes into account the data flowing through heap and contributing to SQL queries generation.

System and method for SQL query extraction in an application

Identifying root cause of code smells is crucial in enabling proper and efficient software maintenance. Desired are computationally less intensive and easy to implement solutions. Embodiments herein provide a method and system for code analysis to identify causes of code smells. The method provides considerable automation during software maintenance by analyzing detected code smells of two subsequent versions of an application by categorizing the code smells, filtering significant code smells from the detected code smells, mapping the significant code smells between two versions, generating a customized PDG for the mapped functions and performing the isomorphic subgraph mapping for computing a function difference. The computed function difference provides added part of the code or removed part or region of the code of the application, which is cause of the significant added code smells, which can then be provided for manual analysis to identify the root causes for efficient software maintenance.

Growing community of inventors

Pune, India

Monika Sahu