The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Feb. 18, 2014
Filed:
Nov. 22, 2010
Shay Artzi, Brookline, MA (US);
Ryan Berg, Sudbury, MA (US);
John Peyton, Arlington, MA (US);
Marco Pistoia, Amawalk, NY (US);
Manu Sridharan, Boulder, CO (US);
Takaaki Tateishi, Yamato, JP;
Omer Tripp, Har-Adar, IL;
Robert Wiener, Framingham, MA (US);
Shay Artzi, Brookline, MA (US);
Ryan Berg, Sudbury, MA (US);
John Peyton, Arlington, MA (US);
Marco Pistoia, Amawalk, NY (US);
Manu Sridharan, Boulder, CO (US);
Takaaki Tateishi, Yamato, JP;
Omer Tripp, Har-Adar, IL;
Robert Wiener, Framingham, MA (US);
International Business Machines Corporations, Armonk, NY (US);
Abstract
A method includes determining selected global variables in a program for which flow of the selected global variables through the program is to be tracked. The selected global variables are less than all the global variables in the program. The method includes using a static analysis performed on the program, tracking flow through the program for the selected global variables. In response to one or more of the selected global variables being used in security-sensitive operations in the flow, use is analyzed of each one of the selected global variables in a corresponding security-sensitive operation. In response to a determination the use may be a potential security violation, the potential security violation is reported. Apparatus and computer program products are also disclosed.