Method for prewarning aggression based on software defect and network aggression relation excavation

Abstract

The invention provides a method for prewarning an attack based on digging a relationship of software vulnerability and network attack. The method comprises a vulnerability detection sub-system, a feature vulnerability sequence bank sub-system and an attack prewarning determination sub-system, wherein the vulnerability detection sub-system carries out static analysis and detection rule-based software vulnerability; the feature vulnerability sequence bank sub-system digs and records the relationship between the software vulnerability and the network attack by vulnerability implant technology; and the attack prewarning determination sub-system matches a detected vulnerability defect of target software with records in the feature vulnerability sequence bank, and sends out an attack prewarningreport.

Description

technical field [0001] The invention belongs to the field of software vulnerability detection and network security, and specifically designs an attack early warning method based on software defect and network attack relationship mining. Background technique [0002] With the continuous development of the software industry, software defects and loopholes have gradually attracted the attention of the industry, especially with the popularization and vigorous development of the Internet, there have been a large number of hacker attacks and security issues, which have affected the security quality of network applications and software. a severe test. At present, there are mainly two technical methods to provide software security assurance. One is a code-based software defect and vulnerability detection method, and the other is an attack pattern-based intrusion detection method. [0003] Code-based software defect and vulnerability detection methods have been widely used in the s...

AI Technical Summary

Problems solved by technology

[0005] At present, the above two types of methods all play an important role in ensuring software security. However, the code-based software defect and vulnerability detection methods mainly detect software source programs and do not care about the impact of environmental variables. The analysis results cannot be comprehensive. To deal with real network attacks; while the intrusion detection method based on the attack mode can only detect the type of intrusion attack, but cannot provide software developers with constructive suggestions for repairing software defects, and it is difficult to substantially improve the quality of software security

Images