Software safety defect library system based on attack mode and management method thereof

Abstract

The invention discloses a software security defect database system based on an attack mode, which comprises a construction unit of a security defect database, a management unit of the security defect database, and a security defect body. The software security defect database system is characterized in that the construction unit of the security defect database comprises the steps of establishing a mapping from the attack mode to a software defect structure, establishing a mapping from the attack mode to a security defect and a mapping from the security defect to a corresponding alleviation proposal, and constructing the two mappings into a unified model; and the management unit of the security defect database comprises a security defect information acquisition module and a security defect information classification module, wherein information acquisition is based on WEB subject mining technology, and defect classification is based on body technology. The software security defect database system simultaneously combines external attack mode analysis and a security-oriented software development cycle to construct a security defect database model, so as to reduce security defects of software products and improve the quality of software, thereby the software security defect database system meets different demands on software security defect examples in different stages and can be used for supporting the data service of the security defect model.

Description

technical field [0001] The invention relates to a software construction method, in particular to a method for discovering and solving software security defects based on an attack mode in the software development cycle. Background technique [0002] With the popularization of the Internet and the improvement of requirements for software security and credibility, software defects lead to unsatisfactory development status of software. Software defects are components in software work products that do not meet the specified requirements, and are the internal causes of software failures or even failures. Its production runs through the entire software project development life cycle. To fundamentally reduce the development cost of safe and reliable software and improve the reliability of the developed software, it is necessary to pay attention to such software defects and problems in the early stages of requirements and design. nature. The attack mode describes the behavior proce...

AI Technical Summary

Problems solved by technology

At present, most of the research at home and abroad is carried out in isolation from the above two unilateral aspects, without systematically combining the relationship and mutual influence among attackers, software defects and software development process, so it cannot be well combined with the system attack mode , the software security issues brought about by the classification and management of software defects

Images