- 专利标题： FALSE-POSITIVES INVALIDATION AND STATIC SECURITY SCANS WITHOUT SCANNING BASED ON REGULAR SCAN HISTORY IN PULL REQUESTS
-
申请号： US17301767申请日： 2021-04-14
-
公开(公告)号： US20220335134A1公开(公告)日： 2022-10-20
- 发明人: Marcin Filip , Michal Bodziony , Marcin Luczynski , Tomasz Zatorski , Wojciech Mis , BARTOSZ TOMASIK
- 申请人： International Business Machines Corporation
- 申请人地址： US NY Armonk
- 专利权人： International Business Machines Corporation
- 当前专利权人： International Business Machines Corporation
- 当前专利权人地址： US NY Armonk
- 主分类号： G06F21/57
- IPC分类号： G06F21/57
摘要：
Providing an automatic mechanism of invalidating false-positive indications of certain identified portions of source code to reduce the number of errors in a security report. Certain embodiments of the present invention utilize static security scanning as a mechanism for automatically determining which portions of the identified source code contain potential vulnerabilities, and whether these identified portions of the source code are correctly or incorrectly identified with a false-positive indication.
公开/授权文献
信息查询
