Comprehensive processing method based on software safety defect detection and functional module framework thereof

Abstract

The invention provides a method based on software safety defect detection and a functional module framework device adopted by the method, belonging to the network safety field. The method comprises initialization of software to be detected and detection standards, preprocessing of preliminary analysis data of the software to be detected, sequential detection according to the single safety defect standard and safety defect grade evaluation, comprehensive processing of the safety defects and detection result storage and data discard. The functional module framework comprises a unit module for carrying out initialization on the software to be detected and the detection standards, a unit module for processing the preliminary analysis data of the software to be detected, a unit module for carrying out detection according to the single safety defect standard and evaluating the safety defect grades, a unit module for carrying out comprehensive processing on the safety defects, a unit module for storing the detection results and discarding the data and a database. The invention can carry out overall detection and comprehensive processing on the safety defects of the software and has the characteristics of wide detection range, strong adaptability to the safety defects of the software, high accuracy and reliability of detection and comprehensive processing results and no special requirements on the functions and properties of the software, etc.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a comprehensive processing method for software security defect detection and a functional module framework (device) adopted for realizing the method. By adopting the method and the device of the invention, the detection of security flaws can be carried out aiming at the software in the form of known source codes. Background technique [0002] Due to the defects of program design and writing itself, the software security is reduced, which is an important reason for software security problems. A large number of security flaws in the software system make the software suffer from unexpected attacks during the use stage, and even cause heavy losses. [0003] At present, there are mainly three methods for the discovery of software defects. One is the detection method based on software defects and defect patterns. For example, the application number is CN200810114261.0, and th...

AI Technical Summary

Problems solved by technology

[0013] The solution of the present invention is to process the software to be tested first through the existing tool analysis software to obtain the basic data, and then use the set single defect detection standards to sequentially detect and evaluate the safety defect level, and then the single defect detection data and its defect evaluation level are processed together, and finally the result of the comprehensive processing is stored and processed to obtain the final detection result of the software under test; and the functional module framework device used to realize this method is based on the conventional industrial The detection and comprehensive processing device that the control machine is set as the basis, the device operates through man-machine input, output interface input data and output detection results, so as to realize the purpose of the invention. Therefore, the method of the present invention includes:

Images