System for detecting software bug triggered during practical running of computer program

Abstract

The invention relates to a system for detecting a software bug triggered during practical running of a computer program in the technical field of computers. The system comprises a binary code dynamic inserting module, a program basic block recognizing module, a function call graph constructing module, a control flow graph constructing module, a function recognizing module and a static analysis module. By combining two technologies of dynamic program analysis and static analysis path complementation, the invention not only can detect the bugs which can be triggered during the practical running of the program but also can reach higher program path coverage rate, carry out bug detects on the path which is not covered in the dynamic analysis process, improve the success rate of bug detection and reduce the false rate of the bugs. Meanwhile, the static analysis path complementation technology only analyzes a path which is not executed in dynamic analysis instead of all program paths, thereby greatly reducing the cost on time and system resources.

Description

technical field [0001] The invention relates to a detection system in the field of computer technology, in particular to a detection system for triggering software loopholes when a computer program actually runs. Background technique [0002] Program analysis technology refers to the analysis technology that deduces its structure and data flow for computer programs. In the process of software maintenance detection and software understanding, we need to analyze the structure and data flow of the target program, and the output of the program analysis system is generally a data flow graph and a control flow graph. The data flow graph expresses the transformation and transfer process of information in the program system in a graphical way, especially the situation where data is referenced and defined; the control flow graph often uses the form of a graph or an abstract syntax tree to describe the program structure. [0003] Dynamic program analysis technology is a technology th...

AI Technical Summary

Problems solved by technology

[0004] However, both dynamic program analysis and static program analysis have their insurmountable shortcomings

For dynamic program analysis technology, because the program can only be executed along one path during each dynamic execution, in order to achieve satisfactory path coverage, we must repeat the dynamic analysis for a sufficient number of times, but even so It is also difficult to achieve 100% path coverage

For static program analysis technology, although it can achieve 100% program path coverage, it cannot detect those vulnerabilities that are triggered when the program is actually running, and the false alarm rate of general vulnerabilities is high. Static analysis of an entire large program can incur significant time and system resource overhead

More importantly, existing related systems often require program source code to perform program analysis and vulnerability detection, and cannot directly analyze the binary code of the target program. This shortcoming also limits the use of these systems

Images