公开(公告)号：US20220309159A1

公开(公告)日：2022-09-29

申请号：US17213829

申请日：2021-03-26

申请人： International Business Machines Corporation

发明人： Michal Bodziony ,  BARTOSZ TOMASIK ,  Tomasz Zatorski ,  Marcin Filip ,  Marcin Luczynski ,  Wojciech Mis

IPC分类号： G06F21/56 ,  G06F21/51 ,  G06F21/60

摘要： Utilizing an Information Analyzer to profile data in order to identify data assets that contain executable code for the purpose of ensuring the security and integrity of the profiled data. The results of the data profiling process can be used by security policies to reduce the risks of malicious code execution attacks.

公开(公告)号：US20220335134A1

公开(公告)日：2022-10-20

申请号：US17301767

申请日：2021-04-14

申请人： International Business Machines Corporation

发明人： Marcin Filip ,  Michal Bodziony ,  Marcin Luczynski ,  Tomasz Zatorski ,  Wojciech Mis ,  BARTOSZ TOMASIK

IPC分类号： G06F21/57

摘要： Providing an automatic mechanism of invalidating false-positive indications of certain identified portions of source code to reduce the number of errors in a security report. Certain embodiments of the present invention utilize static security scanning as a mechanism for automatically determining which portions of the identified source code contain potential vulnerabilities, and whether these identified portions of the source code are correctly or incorrectly identified with a false-positive indication.