View article

A system for evaluating security risks including a processor to detect a set of vulnerabilities for an application based on static analysis of the application and calculate a risk score associated with each of the vulnerabilities based on additional characteristics of the application. The processor can also modify the application to prevent vulnerabilities with a risk score above a risk threshold value.