System und Verfahren zur Kontextuellen Sicherheitsanalyse von Softwareartefakten

Details

Veröffentlichungs-Nr.

EP4804056

Anmeldetag

2. März 2026

Veröffentlichung

9. September 2026

Rechtsraum

EP

Abstract

A system and method for contextual security analysis for software artifacts, including, for each of a plurality of software vulnerabilities, where each software vulnerability is associated with a vulnerable function included in a vulnerable library: identifying third party libraries using the vulnerable library; flagging third party libraries including a function reaching the vulnerable function as vulnerable - by associating the identified third party libraries with the software vulnerability; and flagging first party libraries matching a flagged third party library as vulnerable. According to some embodiments, flagged libraries may be described in dedicated database entries stored in cache memory, which may be used to enhance computational efficiency and robustness in performing security analysis on software artifacts (such as, e.g., large codebases pointing to external libraries, and the like).

Anmelder

Firma

Jfrog Ltd.

Land

🇮🇱 Israel