| 发明名称 |
AUTOMATIC CORRECTION OF SECURITY DOWNGRADERS |
| 摘要 |
Methods and systems for automatic correction of security downgraders includes performing a security analysis that disregards existing user-provided downgraders to detect flows that are vulnerable; locating candidate downgraders on the flows; determining whether each of the candidate downgraders protects against all vulnerabilities associated with each downgrader's respective flow; and transforming candidate downgraders that do not protect against all of the associated vulnerabilities, such that the transformed downgraders do protect against all of the associated vulnerabilities. |
| 申请公布号 |
US2014237602(A1) |
申请公布日期 |
2014.08.21 |
| 申请号 |
US201313768645 |
申请日期 |
2013.02.15 |
| 申请人 |
INTERNATIONAL BUSINESS MACHINES CORPORATION |
发明人 |
Guarnieri Salvatore A.;Pistoia Marco;Tripp Omer |
| 分类号 |
H04L29/06 |
主分类号 |
H04L29/06 |
| 代理机构 |
|
代理人 |
|
| 主权项 |
1. A method for automatic correction of security downgraders, comprising:
performing a security analysis that disregards existing user-provided downgraders to detect flows that are vulnerable; locating candidate downgraders on said flows; determining whether each of the candidate downgraders protects against all vulnerabilities associated with each downgrader's respective flow; and transforming with a processor candidate downgraders that do not protect against all of the associated vulnerabilities, such that the transformed downgraders do protect against all of the associated vulnerabilities. |
| 地址 |
Armonk NY US |
