Smart Glasses Source Code Vulnerability Scanning

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current methods for identifying vulnerabilities in application source code are manual and lack automation, leading to potential integrity issues and incomplete security assessments, even when using third-party reviewers or tools.

Innovation Solution

Smart glasses equipped with processors and scanning devices are used to scan and analyze application source code independently of internal development platforms, employing deep learning and machine learning to identify vulnerabilities, which are then classified and reported, enabling automated security assessments.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual review methods are used to identify vulnerabilities, then reviewers can access the source code repository environment, but this leads to integrity issues and security risks

Engineering Contradiction:

Improvecode integrityVSAvoidaccess to source code

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent extracts the source code from the internal development platform environment and processes it externally using smart glasses. The scanning device captures code images, which are then analyzed outside the protected repository environment, eliminating the security risk of granting access to reviewers while maintaining the ability to perform vulnerability assessment.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces smart glasses as an intermediary device between the source code and the reviewer. The device captures code images, processes them through machine learning models, and presents analysis results without requiring the reviewer to directly access the source code repository, thus maintaining integrity while enabling review functionality.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Extent of automation

If automated tools are used to test application source code, then complexity and run-time aspects can be checked automatically, but security issues and compliance cannot be identified

Engineering Contradiction:

Improvecode testing automationVSAvoidsecurity issue identification

Core Design Contradiction:

Extent of automationVSReliability

Solution Approach 1:

The patent implements a self-service vulnerability identification system where the smart glasses device autonomously captures source code images, processes them through embedded machine learning models, and generates vulnerability reports without requiring manual configuration or intervention. The system automatically identifies security issues, compliance problems, and code quality concerns.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent transforms the source code from its traditional text-based format into image format through the scanning device. This parameter change enables the use of computer vision and image recognition technologies to analyze code structure, identify patterns, and detect vulnerabilities that traditional automated tools might miss.

Inventive Principle:

Principle #35Parameter changes

3Measurement precision

If third-party reviewers are used to assess vulnerabilities, then independent assessment can be performed, but access to the source code repository creates security risks

Engineering Contradiction:

Improvevulnerability assessment accuracyVSAvoidsecurity risks from code access

Core Design Contradiction:

Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the code assessment function from the internal development platform and performs it externally using smart glasses. The device captures code images and processes them outside the protected repository environment, allowing third-party reviewers to independently assess vulnerabilities without creating security risks through code access.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent creates a visual copy of the source code in image format through the scanning device. This copy can be analyzed and assessed by third-party reviewers without providing them access to the actual source code repository, maintaining security while enabling independent vulnerability assessment.

Inventive Principle:

Principle #26Copying

Data Source

PatentUS11816221B2Source code vulnerability scanning and detection smart glasses

Publication Date: 2023.11.14 BANK OF AMERICA CORP

AI summary

Systems and methods for leveraging smart glasses for identifying vulnerabilities in application source code is provided. The smart glasses may be configured to scan the code from a user interface (“UI”) linked to an internal development platform and project the scanned code on a display of the smart glasses. Using deep learning, the smart glasses may be enabled to identify one or more vulnerabilities within the scanned application source code. The smart glasses may link a vulnerability classification code for each identified vulnerability. The smart glasses may generate a vulnerability report file including the scanned application source code, each identified vulnerability and its linked vulnerability classification code and transfer the vulnerability report file to a source code repository within the internal development platform. The scanned application source code may be matched to the original application source code and further separate the marched original application source code for assessment.