An efficient code audit method for accurately detecting security vulnerabilities in source codes

Currently code security audit/review or white-box security test is widely used to analyze the source codes and detect security vulnerabilities. In this paper we describe a more efficient code security audit method based on the reference tree with security properties which building on all manipulable entries in source codes. This method can The method in this invention can greatly reduce false positives and provides an efficient solution for automated secure auditing on source codes by only checking the exploitable security flows.