The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Aug. 22, 2023
Filed:
Mar. 30, 2022
Visa International Service Association, San Francisco, CA (US);
Vinjith Nagaraja, Austin, TX (US);
Raymond Brammer, Round Rock, TX (US);
James Myers, Round Rock, TX (US);
Christopher Gutierrez, Foster City, CA (US);
Ireneusz Pazdzierniak, Foster City, CA (US);
Shanshan Jiang, Foster City, CA (US);
Karim Mawani, Foster City, CA (US);
Pankaj Rathore, Austin, TX (US);
Jerry Wald, San Francisco, CA (US);
David Worth, Foster City, CA (US);
Dhruv Vig, Austin, TX (US);
Archana Taparia, Foster City, CA (US);
Robert Chifamba, Austin, TX (US);
Vamshi Ramarapu, Austin, TX (US);
Visa International Service Association, San Francisco, CA (US);
Abstract
A method and system for remediating vulnerable code libraries, including open source libraries, in a software application. An application, that uses code libraries, and information regarding known library vulnerabilities are received, then it is determined if one or more libraries in the application are vulnerable based upon the information. For each of the one or more vulnerable libraries, a library version that minimizes risk is determined. The determined library version is incorporated into the application to form a test application, and an application test is performed on the test application. If an application test score on the test application is below a predetermined threshold, the determined library version is incorporated into a final application precursor. A final application can be determined from the final application precursor for each of the one or more vulnerable libraries.