VERIFYING APPLICATION SECURITY VULNERABILITIES

摘要

An illustrative embodiment of a computer-implemented process for verifying application security vulnerabilities receives a source code to analyze, performs a static analysis using the received source code and generates a vulnerability call trace for the received source code. Responsive to a determination that all static analysis results are not validated, mock objects are generated using the vulnerability call trace and a unit test is created using the generated mock objects. The unit test is executed using the generated mock objects and responsive to a determination that an identified vulnerability was validated; a next static analysis result is selected. Responsive to a determination that all static analysis results are validated, results and computed unit tests are reported.