Michael W Weber

US Patent:

7302707, Nov 27, 2007

Filed:

Jan 15, 2003

Appl. No.:

10/342247

Inventors:

Michael D. Weber - Brookline MA, US
Viren R. Shah - Ashburn VA, US
Chuangang Ren - Sterling VA, US

Assignee:

Cigital, Inc. - Dulles VA

International Classification:

G06F 11/00

US Classification:

726 25, 726 22, 713189, 713190, 713191, 705 51, 705 52, 705 53, 705 54, 717174, 717175, 717176, 717177, 717178

Abstract:

Embodiments of the present invention relate to systems and methods for detecting software buffer security vulnerabilities. According to an embodiment, a computer-readable medium stores a plurality of instructions to be executed by a processor for detecting software buffer security vulnerabilities. The plurality of instructions comprise instructions to receive software code associated with a potential buffer vulnerability, generate constraints related to the software code associated with the potential buffer vulnerability, partition the software code into one or more procedures, and generate for each procedure a set of constraints that summarizes the impact of a procedure on buffer variables. The computer-readable medium also stores instructions to receive a system dependence graph corresponding to the software code, traverse back along the system dependence graph to collect constraints related to the potential buffer vulnerability, and reduce the collected constraints to determine a maximum value length that has been assigned to a buffer corresponding to a potential buffer vulnerability. The plurality of instructions also include to compare the maximum value length that has been assigned to a buffer to an amount of memory that has been allocated to the buffer to determine whether there is a buffer vulnerability.

US Patent:

7392545, Jun 24, 2008

Filed:

Jan 15, 2003

Appl. No.:

10/342310

Inventors:

Michael D. Weber - Brookline MA, US
Viren R. Shah - Ashburn VA, US
Chuangang Ren - Sterling VA, US

Assignee:

Cigital, Inc. - Dulles VA

International Classification:

G06F 12/16
G08B 23/00
G06F 5/00

US Classification:

726 25, 726 22, 726 23, 726 24, 713188, 713189, 713190, 705 51, 717174

Abstract:

Embodiments of the present invention relate to systems and methods for static analysis of a software application. According to an embodiment, a system includes a program scanner coupled to an analysis engine. The program scanner is configured to identify one or more vulnerability patterns in a software program and to output an initial potential vulnerability list. The analysis engine is configured to apply one or more rules to a potential vulnerability to determine whether the potential vulnerability is a vulnerability.

US Patent:

D643986, Aug 23, 2011

Filed:

Dec 22, 2010

Appl. No.:

29/381673

Inventors:

Alvaro Soto - Oakland Gardens NY, US
Alexander Lamis - New York NY, US
Michael A. Weber - Brooklyn NY, US
Nathaniel Pearson - Brooklyn NY, US

Assignee:

Landscape Forms, Inc. - Kalamazoo MI

International Classification:

0909

US Classification:

D34 1

US Patent:

D643987, Aug 23, 2011

Filed:

Dec 22, 2010

Appl. No.:

29/381674

Inventors:

Alvaro Soto - Oakland Gardens NY, US
Alexander Lamis - New York NY, US
Michael A. Weber - Brooklyn NY, US
Nathaniel Pearson - Brooklyn NY, US

Assignee:

Landscape Forms, Inc. - Kalamazoo MI

International Classification:

0909

US Classification:

D34 1

US Patent:

D648658, Nov 15, 2011

Filed:

Dec 22, 2010

Appl. No.:

29/381675

Inventors:

Alvaro Soto - Oakland Gardens NY, US
Alexander Lamis - New York NY, US
Michael A. Weber - Brooklyn NY, US
Nathaniel Pearson - Brooklyn NY, US

Assignee:

Landscape Forms, Inc. - Kalamazoo MI

International Classification:

1211

US Classification:

D12115

US Patent:

D652976, Jan 24, 2012

Filed:

Dec 22, 2010

Appl. No.:

29/381677

Inventors:

Alvaro Soto - Oakland Gardens NY, US
Alexander Lamis - New York NY, US
Michael A. Weber - Brooklyn NY, US
Nathaniel Pearson - Brooklyn NY, US

Assignee:

Landscape Forms, Inc. - Kalamazoo MI

International Classification:

2605

US Classification:

D26 68

US Patent:

D652977, Jan 24, 2012

Filed:

Dec 22, 2010

Appl. No.:

29/381678

Inventors:

Alvaro Soto - Oakland Gardens NY, US
Alexander Lamis - New York NY, US
Michael A Weber - Brooklyn NY, US
Nathaniel Pearson - Brooklyn NY, US

Assignee:

Landscape Forms, Inc. - Kalamazoo MI

International Classification:

2605

US Classification:

D26 68

US Patent:

D659415, May 15, 2012

Filed:

Dec 22, 2010

Appl. No.:

29/381679

Inventors:

Alvaro Soto - Oakland Gardens NY, US
Alexander Lamis - New York NY, US
Michael A. Weber - Brooklyn NY, US
Nathaniel Pearson - Brooklyn NY, US

Assignee:

Landscape Forms Inc. - Kalamazoo MI

International Classification:

0601

US Classification:

D 6355