The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Patent No.:

US 9384354 B1

PDF
Full Text
Expired
Date of Patent:
Jul. 05, 2016

Filed:

Feb. 20, 2013
Applicant:

International Business Machines Corporation, Armonk, NY (US);

Inventors:

Salvatore Angelo Guarnieri, New York, NY (US);

Marco Pistoia, Amawalk, NY (US);

Stephen Darwin Teilhet, Milford, NH (US);

Omer Tripp, Herzelyia, IL;

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/00 (2013.01); G06F 21/57 (2013.01); G06F 11/36 (2006.01);
U.S. Cl.
CPC ...
G06F 21/577 (2013.01); G06F 11/3612 (2013.01); G06F 2221/033 (2013.01);
Abstract

A method includes a computing system reading a rule file that includes one or more rules having specified paths to methods, such that each method corresponds to one of a sink, source, or sanitizer. The method includes the computing system matching the methods to corresponding ones of sinks, sources, or sanitizers determined through a static analysis of an application. The static analysis determines at least flows from sources of information to sinks that use the information. The method includes the computing system, using the sinks, sources, and sanitizers found by the matching, performing a taint analysis to determine at least tainted flows from sources to sinks, the tainted flows being flows that pass information to sinks without the information being endorsed by a sanitizer. Apparatus and program products are also shown.


Find Patent Forward Citations

Quick Actions:

Guarnieri, Salvatore. (2016). Rule matching in the presence of languages with no types or as an adjunct to current analyses for security vulnerability analysis (U.S. Patent No. 9384354). U.S. Patent and Trademark Office. https://idiyas.com/patent/badge/9384354

Data source: USPTO (United States Patent and Trademark Office) public patent records. Weekly synchronization. How IDiyas builds this profile

Loading…