Software Vulnerability Inspection Validation System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software inspection methods cannot validate the validity of the inspection process, leaving software safety unsecured despite vulnerability inspections.
Innovation Solution
A determination system that receives and compares results from two independent software inspections, determining the validity of the first inspection by identifying undetected vulnerabilities in the second inspection, and outputs the determination result.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software vulnerability inspection is performed, then software safety is improved, but the validity of the inspection cannot be confirmed
Solution Approach 1:
The patent implements a feedback mechanism where second inspection results are used to evaluate and validate first inspection results. The determination unit compares vulnerabilities detected in both inspections and provides feedback on the validity degree of the first inspection, thereby enabling continuous improvement and verification of inspection quality.
Solution Approach 2:
The patent performs a second inspection as a preliminary validation step before finalizing the software safety assessment. By conducting the second inspection and using its results to determine the validity of the first inspection, the system ensures that inspection validity is established before relying on the inspection results for safety decisions.
2Measurement precision
If multiple inspection methods are used to validate inspection validity, then measurement precision is improved, but device complexity increases
Solution Approach 1:
The patent divides the inspection validation process into distinct segments: first inspection execution, second inspection execution, comparison analysis, and validity determination. Each segment is handled by specific units (first inspection unit, second inspection unit, determination unit), allowing the complex validation process to be managed through modular, independent components.
Solution Approach 2:
The determination unit acts as an intermediary that receives results from both first and second inspections, compares them, and produces a validity assessment. This intermediary component simplifies the overall system architecture by centralizing the comparison and validation logic in a single unit rather than requiring direct interaction between multiple inspection systems.
Data Source
AI summary
A determination system according to an aspect of the present disclosure includes: at least one memory storing a set of instructions; and at least one processor configured to execute the set of instructions to: receive a first inspection result that is a result of a first inspection of vulnerability of target software; receive a second inspection result that is a result of a second inspection of vulnerability of the target software; determine validity of the first inspection from undetected vulnerability that is vulnerability detected in the result of the second inspection and not detected in the result of the first inspection; and output a result of determination of the validity.