US 12,461,716 B2
Programming code vulnerability remediation
Malek Ben Salem, Falls Church, VA (US); Ganesh Devarajan, Hawthorn Woods, IL (US); John Donovan Delmare, Jr., Gainesville, VA (US); Krishna Mohan Dasari, Frisco, TX (US); Mário Lauande Lacroix, Toronto (CA); Cristian Daniel Ariza, Lanus (AR); and Mohnish Gahlot, Gurgaon (IN)
Assigned to ACCENTURE GLOBAL SOLUTIONS LIMITED, Dublin (IE)
Filed by Accenture Global Solutions Limited, Dublin (IE)
Filed on Jul. 3, 2023, as Appl. No. 18/346,386.
Claims priority of provisional application 63/359,289, filed on Jul. 8, 2022.
Claims priority of application No. 202211039340 (IN), filed on Jul. 8, 2022.
Prior Publication US 2024/0012623 A1, Jan. 11, 2024
Int. Cl. G06F 8/30 (2018.01)
CPC G06F 8/30 (2013.01) 20 Claims
OG exemplary drawing
 
1. A programming code remediation system, comprising:
at least one processor;
a non-transitory processor-readable medium storing machine-readable instructions that cause the at least one processor to:
access programming code of an application and information regarding potential secrets included in the programming code;
calculate a final risk score for each of the potential secrets,
wherein the final risk score is indicative of a corresponding potential secret being a false positive or a true positive;
identify the false positives and the true positives from the potential secrets based at least on the final risk scores of the potential secrets;
filter out the false positives of the potential secrets from further processing;
store a subset of the potential secrets determined to be the true positives in corresponding storage locations of a vault; and
generate modified programming code by replacing the true positives in the programming code with corresponding access mechanisms to the storage locations on the vault storing the true positives.