The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Feb. 18, 2025

Filed:

Sep. 11, 2023
Applicant:

Veracode, Inc., Burlington, MA (US);

Inventors:

Roman Rudenko, Vienna, AT;

Anna Bacher, Vienna, AT;

Assignee:

Veracode, Inc., Burlington, MA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 11/36 (2006.01); G06F 8/35 (2018.01); G06F 8/36 (2018.01); G06F 11/362 (2025.01); G06N 20/00 (2019.01);
U.S. Cl.
CPC ...
G06F 11/3636 (2013.01); G06F 8/35 (2013.01); G06F 8/36 (2013.01); G06N 20/00 (2019.01);
Abstract

A generative artificial intelligence (AI) driven code fixing pipeline has been created that uses a transformer-based large language model (LLM) to patch flawed program code. A pre-trained LLM is fine-tuned to generate a response that is a modified version of a code fragment in a prompt to the pre-trained model. After fine-tuning, the pre-trained LLM (hereinafter 'code fix model') is integrated into a pipeline that includes a program code cybersecurity scanner and a prompt generator. The scanner generates indications of flaws in program code and weakness types for those flaws. These indications flow into the prompt generator. The prompt generator retrieves reference code pairs based on weakness type and programming language to generate a batch of prompts to run inference on with the code fix model. The responses generated by the code fix model are presented as patching alternatives.


Find Patent Forward Citations

Loading…