Abstract: A method, apparatus and computer program product, the method comprising: accessing user computer code; automatically extracting a slice from the user computer code indicating usage or usage attempt of source code, the slice comprising a multiplicity of words; subject to a word from the multiplicity of words being combined of at least two words, splitting the word to the at least two words; issuing a query based on at least some of the multiplicity of words and the at least two words, to a source and document database; and receiving in response to the query, at least one source section or document related to usage of the source code.

Abstract: A method, computerized apparatus and computer program product, the method comprising: obtaining code; determining a collection of open source libraries used by the code; for each open source library: determining whether an updated version comprising an update area exists for the library; and subject to the existence of an updated version: subject to the updated area not being reachable from the user code, updating the open source library to the updated version; subject to the updated area being reachable only from a non-updated area of the updated version wherein the non-updated area is reachable from the user code, updating the open source library to the updated version; and subject to the updated area being reachable directly from a part of the user code, notifying a user about the updated version of the open source library and the part of the computer code.

Abstract: A method, apparatus and computer program product, the method comprising: accessing user computer code; automatically extracting a slice from the user computer code indicating usage or usage attempt of source code, the slice comprising a multiplicity of words; subject to a word from the multiplicity of words being combined of at least two words, splitting the word to the at least two words; issuing a query based on at least some of the multiplicity of words and the at least two words, to a source and document database; and receiving in response to the query, at least one source section or document related to usage of the source code.

Abstract: A method, system and computer program product, the method comprising: obtaining one or more source files to be examined for open source usage; extracting partial representation of a source file from the source files; creating fingerprints from the partial representation; encoding the fingerprints into characteristics; issuing a query to a database for retrieving from an open source and characteristics index one or more open source files associated with the characteristics; receiving a response including the retrieved open source file; checking whether the source file comprises a snippet from the open source file; and subject to the source file comprising the snippet, outputting an identification of the open source file.

Abstract: A method, computerized apparatus and computer program product, the method comprising: obtaining computer code; determining from the computer code a collection of components reachable from the computer code; providing information about the components to a server; identifying by the server using information retrieved from a database, reachable components associated with the collection of components, which have stored vulnerabilities; determining from the computer code and the reachable components that have stored vulnerabilities, a collection of reachable finer resolution components; identifying, further components from the collection of reachable finer resolution components, which have stored vulnerabilities; and outputting information about the further components, wherein the computer code cannot be reconstructed from the information about the collection of components and the information about the finer resolution components.

Abstract: A method, system and computer program product, the method comprising: obtaining one or more source files to be examined for open source usage; extracting partial representation of a source file from the source files; creating fingerprints from the partial representation; encoding the fingerprints into characteristics; issuing a query to a database for retrieving from an open source and characteristics index one or more open source files associated with the characteristics; receiving a response including the retrieved open source file; checking whether the source file comprises a snippet from the open source file; and subject to the source file comprising the snippet, outputting an identification of the open source file.

Abstract: A method, computerized apparatus and computer program product, the method comprising: obtaining computer code; determining from the computer code a collection of components reachable from the computer code; providing information about the components to a server; identifying by the server using information retrieved from a database, reachable components associated with the collection of components, which have stored vulnerabilities; determining from the computer code and the reachable components that have stored vulnerabilities, a collection of reachable finer resolution components; identifying, further components from the collection of reachable finer resolution components, which have stored vulnerabilities; and outputting information about the further components, wherein the computer code cannot be reconstructed from the information about the collection of components and the information about the finer resolution components.

Abstract: A method, system and computer program product, the method comprising: obtaining an open source class and archive database; receiving an Android Application Package (APK); retrieving one or more class comprised in the APK; matching each of the classes against the open source class and archive database, to obtain a corresponding archive collection, such that each archive in the archive collection comprises at least one of the classes; and reporting the respective archive collection.

Abstract: A method, system and computer program product, the method comprising: obtaining an open source class and archive database; receiving an Android Application Package (APK); retrieving one or more class comprised in the APK; matching each of the classes against the open source class and archive database, to obtain a corresponding archive collection, such that each archive in the archive collection comprises at least one of the classes; and reporting the respective archive collection.

Abstract: A method, system and computer program product, the method comprising: receiving a characteristic of a source code entity to be checked; comparing the characteristic of the source code entity to be checked to characteristics stored in a repository; and subject to determining with at least a first probability that the characteristic of the source code entity to be checked is found in the repository, providing an indication of an open source library associated with the characteristic, wherein the source code entity to be checked is not received with the characteristic.

Abstract: A method, system and computer program product, the method comprising: receiving a characteristic of a source code entity to be checked; comparing the characteristic of the source code entity to be checked to characteristics stored in a repository; and subject to determining with at least a first probability that the characteristic of the source code entity to be checked is found in the repository, providing an indication of an open source library associated with the characteristic, wherein the source code entity to be checked is not received with the characteristic.

Abstract: A method of controlling and managing open source software (OSS) resources used by developers in their software projects is provided herein. The method includes the following steps: analyzing the software projects, to yield a proprietary projects model that represents dependencies of source code portions of the software projects upon the OSS resources; generating and updating over time, OSS profiles for the OSS resources exhibiting technical and legal attributes; generating and updating over time, projects profiles for the software projects, based on the model and on monitoring and learning OSS resources usage by the developers; and monitoring actual OSS resources usage and providing the developers with at least one of: reports responsive to the changes the OSS; and guidance responsive to queries from the developers, wherein the reports and the guidance are based on the actual OSS usage, projects model, the projects profiles, and the OSS profiles.

Abstract: A system and method using statistical analysis for the process of analyzing and generating organizational policies is presented. This inventive method comprises, for one or more tests, using a test to calculate a test result for the policy based on current violator entities and potential violator entities, and determining a policy ranking for the policy based on the test result of the test, and evaluating the policy based on the policy rankings determined from the tests. The method can also comprise creating a repository comprising the policy rankings for the plurality of policies. The repository can be used to trend, benchmark, alert and improve the policies. The method can also comprise creating a rule profile for the one policy comprising the one policy, the current violator entities of the policy, the potential violator entities of the policy, the test results and the policy rankings from the tests.