Method for prewarning aggression based on software defect and network aggression relation excavation

Abstract

The invention provides a method for prewarning an attack based on digging a relationship of software vulnerability and network attack. The method comprises a vulnerability detection sub-system, a feature vulnerability sequence bank sub-system and an attack prewarning determination sub-system, wherein the vulnerability detection sub-system carries out static analysis and detection rule-based software vulnerability; the feature vulnerability sequence bank sub-system digs and records the relationship between the software vulnerability and the network attack by vulnerability implant technology; and the attack prewarning determination sub-system matches a detected vulnerability defect of target software with records in the feature vulnerability sequence bank, and sends out an attack prewarning report.

Description

Technical field [0001] The invention belongs to the field of software vulnerability detection and network security, and specifically designs an attack warning method based on software defect and network attack relationship mining. Background technique [0002] With the continuous development of the software industry, software defects and vulnerabilities have gradually attracted the attention of the industry. Especially with the popularization and vigorous development of the Internet, a large number of hacker attacks and security problems have appeared, which has affected the security quality of network applications and software. A severe test. At present, two technical methods are mainly adopted to provide software security assurance. One is the software defect and vulnerability detection method based on code, and the other is the intrusion detection method based on the attack mode. [0003] Code-based software defect and vulnerability detection methods have been widely used in t...

AI Technical Summary

Problems solved by technology

[0005] At present, the above two types of methods all play an important role in ensuring software security. However, the code-based software defect and vulnerability detection methods mainly detect software source programs and do not care about the impact of environmental variables. The analysis results cannot be comprehensive. To deal with real network attacks; while the intrusion detection method based on the attack mode can only detect the type of intrusion attack, but cannot provide software developers with constructive suggestions for repairing software defects, and it is difficult to substantially improve the quality of software security

Images