Application Repository Library Patching With Automated Vulnerability Fixes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing application repositories require manual and repetitive efforts to apply security patches, which are time-consuming and lack transparency in security patch history, while existing tools only identify vulnerabilities without automating the fix.
Innovation Solution
A computer device and method that automatically perform thread checks for critical vulnerabilities, update fixed library versions, run unit tests, and push successful updates to the repository, generating reports for traceability and auditability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual security patching is performed by developers, then security vulnerabilities can be addressed, but the process is time-consuming and repetitive
Solution Approach 1:
The system performs self-service by automatically detecting vulnerabilities in application repositories and applying security patches without requiring manual developer intervention. The automated pipeline continuously monitors, identifies, and remediates security issues, making the system self-sufficient in maintaining security compliance.
Solution Approach 2:
The manual mechanical process of developers reviewing and applying security patches is replaced with an automated computational system. The patent substitutes human manual operations with an automated pipeline that uses software agents to detect vulnerabilities and apply patches programmatically, eliminating the need for repetitive manual security auditing.
2Difficulty of detecting and measuring
If existing vulnerability tools are used, then security threats can be identified, but the actual fix must be applied manually by developers
Solution Approach 1:
The patent merges the vulnerability detection function with the patch application function into a single integrated automated pipeline. Instead of having separate tools for detection and separate manual processes for fixing, the system combines both capabilities so that when vulnerabilities are detected, the fixing process is automatically triggered and executed without handover to manual operations.
Solution Approach 2:
The system performs self-service by automatically detecting vulnerabilities in application repositories and applying security patches without requiring manual developer intervention. The automated pipeline continuously monitors, identifies, and remediates security issues, making the system self-sufficient in maintaining security compliance.
3Reliability
If security patches are applied manually, then flexibility in review is maintained, but transparency and traceability of security patch history are reduced
Solution Approach 1:
The automated pipeline implements comprehensive feedback mechanisms that log and record every security patch application, vulnerability detection, and system state change. This creates a transparent, traceable history of all security-related operations, providing full visibility into the security patch lifecycle while maintaining system reliability through automated auditing capabilities.
Data Source
Figure 1~2
Figure 3
AI summary
According to an aspect of the present invention, the computer device (100) includes a processor (10); and a memory (20) coupled to the processor (10), the memory (20) storing instructions, which when executed by the processor (10), cause the computer device (100) to perform operations including: performing a thread check for critical vulnerabilities on all libraries (31, 32, 33) of an application (30) from an application repository (AR); accessing a resource (50) including fixed library versions (31f, 33f) and providing at least one fixed library version (31f, 33f) for fixing; updating the at least one fixed library version (31f, 33f) in the application (30); running at least one unit test on the application (30); pushing the at least one fixed library version (31f, 33f) in the application repository (AR).