Backpropagation and monte carlo trees for software vulnerability analysis

Monte Carlo tree search algorithms with backpropagation optimize software dependency trees to automatically identify and repair vulnerabilities, enhancing security and efficiency in software projects.

WO2026087972A1PCT designated stage Publication Date: 2026-04-30INTERNATIONAL BUSINESS MACHINE CORPORATION +2
View PDF 6 Cites 0 Cited by

Patent Information

Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Filing Date
2025-09-26
Publication Date
2026-04-30

AI Technical Summary

Technical Problem

Conventional software component analysis (SCA) tools struggle to accurately identify and address indirect dependencies, leading to inefficiencies in detecting and mitigating security vulnerabilities in software projects.

Method used

The use of Monte Carlo tree search algorithms combined with backpropagation to construct and optimize software dependency trees, enabling the identification and replacement of vulnerable nodes with optimal software packages, thereby repairing vulnerabilities and ensuring compatibility.

Benefits of technology

This approach allows for automatic detection and mitigation of software vulnerabilities, generating optimal software packages that meet project requirements, reducing risks and improving development efficiency.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure IB2025059707_30042026_PF_FP_ABST
    Figure IB2025059707_30042026_PF_FP_ABST
Patent Text Reader

Abstract

A Monte Carlo tree structure of related software packages for a software project is constructed, wherein one or more vulnerable nodes of the Monte Carlo tree structure indicate a software vulnerability. A Monte Carlo tree search algorithm is applied on the Monte Carlo tree structure, the applying comprising expanding the Monte Carlo tree structure with multiple respective candidate nodes corresponding to alternative software packages for replacement of the one or more vulnerable nodes and performing iterative simulation and backpropagation through different tree updates using the multiple respective candidate nodes to identify at least one best replacement node from the multiple candidate nodes. A repaired software set for the software project is exported, the repaired software set including additional software corresponding to the at least one identified best replacement node, the additional software replacing one or more software packages that are related to the one or more vulnerable nodes.
Need to check novelty before this filing date? Find Prior Art

Citation Information

Patent Citations

  • Monte Carlo search tree-based graph feature search method and device

    CN115545199A

  • Fuzzy test method and equipment based on Monte Carlo tree search algorithm

    CN116257429A

  • Detecting vulnerabilities in a supply chain

    US20180197129A1

  • Modification of a dockerfile to repair vulnerabilities existing in the dockerfile

    US20230083195A1

  • System and method for cyber exploitation path analysis and response using federated networks

    US20230370491A1