Method for detecting software loophole model based on loophole model

Abstract

The invention provides a software vulnerability model test method based on vulnerability models. The method comprises the following steps: 1) the vulnerability models are loaded into a flow process from a database, that is, the vulnerability models are put into a memory, and data structures of the vulnerability models are established and used for reference during analyses of programs; 2) in the previous step for testing the models, models are tested according to relevant operations of vulnerability based on functions; and 3) in the final step for testing the models, the models are tested for principal functions, the states are tested and the existence of vulnerability is reported according to relevant operations of vulnerability and the model test results in the previous step. The vulnerability model load flow is as follows: the vulnerability models consist of vulnerability state nodes and gathers with directed edges; a flow for operating transition tables retrieved according to the directed edge types is established in a memory; irrelevant operations are filtered and removed through abstracting and processing programs in an abstract manner; the operation sequence flow relative to the vulnerability models is abstracted; and each function program feature corresponds to an operation sequence linked list.

Description

technical field [0001] The invention relates to a method for detecting computer software loopholes, in particular to a method for detecting software loopholes based on a loophole model. Background technique [0002] As the size and complexity of software grow, so do the hidden security holes and the threat of loss from attacks. The fundamental solution to prevent system attacks and intrusions is to find and eliminate software defects before they are exploited. Software code detection for software security vulnerabilities is one of the important means to predict and prevent vulnerabilities. Vulnerability static detection is a more effective code vulnerability detection technology, and the vulnerability model detection method is one of the representative detection methods. We propose a model checking approach based on a state machine model of vulnerabilities to provide automatic detection of possible vulnerabilities in software code. [0003] The current software vulnerabil...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the problems that there are a lot of repetitive work and affecting the detection speed in the current software vulnerability detection method, the present invention provides a software vulnerability model detection method based on the vulnerability model

Images