.png&w=828&q=75)
Solution Statement We propose a unified code-aware analysis system that connects source-code usage with dependency vulnerabilities. Key Components AST & Call Graph Engine Parses source files. Builds caller-callee relationships. Identifies unused or unreachable code. Dependency & Vulnerability Scanner Detects dependencies, versions, and known vulnerabilities. Collects vulnerability information from security scanners. Reachability Analysis Maps vulnerable dependencies to application code paths. Determines whether vulnerable functionality is actually reachable. LLM Analysis Interprets the collected results. Converts technical findings into understandable insights. Output Shows unused code, relevant vulnerabilities, reachable paths, impact, and recommended actions.
27 Sep 2026