Invention Grant
- Patent Title: Systems and methods for evaluating a source code scanner
- Patent Title (中): 用于评估源代码扫描器的系统和方法
-
Application No.: US14276218Application Date: 2014-05-13
-
Publication No.: US09275232B2Publication Date: 2016-03-01
- Inventor: Sourav Sam Bhattacharya
- Applicant: Wipro Limited
- Applicant Address: IN Bangalore
- Assignee: Wipro Limited
- Current Assignee: Wipro Limited
- Current Assignee Address: IN Bangalore
- Agency: LeClairRyan, a Professional Corporation
- Main IPC: G06F11/00
- IPC: G06F11/00 ; G06F21/57

Abstract:
Apparatuses, methods, and non-transitory computer readable medium that evaluate a source code scanner are described. In one implementation, the method comprises obtaining source code. One or more good code snippets and one or more bad code snippets are inserted into the source code to obtain a modified source code. An issue list generated by the source code scanner upon scanning the modified source code is obtained. The issue list comprises code segments having security defects identified by the source code scanner, reasons for the security defects, and locations of the security defects in the modified source code. The code segments present in the issue list are compared with the one or more good code snippets and the one or more bad code snippets. A plurality of metrics, indicating quality of the source code scanner, are generated based on the comparison.
Public/Granted literature
- US20150332053A1 SYSTEMS AND METHODS FOR EVALUATING A SOURCE CODE SCANNER Public/Granted day:2015-11-19
Information query