Software bug detection system with low computer system resource expense

Abstract

The invention relates to a software bug detection system with low computer system resource expense and belongs to the technical field of computers. In the software bug detection system with low computer system resource expense, a binary code dynamic insertion module is responsible for converting a binary code of a user program into an assembly code and transmitting the assembly code to a pollution propagation initialization module and an information flow tracking module in the running process of the user program; the pollution propagation initialization module receives the assembly code of the user program from the binary code dynamic insertion module and transmits a register, which stores source data, and memory unit information to a pollution propagation management module; and the information flow tracking module receives the assembly code of the user program, extracts the memory unit information and the register information which are used by the assembly code, inquires the pollution propagation management module, and transmits the query result acquired from the pollution propagation management module and operation code information of the assembly code to a bug rule base. The software bug detection system with low computer system resource expense reduces the computer system resource expense and reduces the times of context switch frequently generated between the original program code and an analysis code.

Description

technical field [0001] The invention relates to a detection system in the field of computer technology, in particular to a software vulnerability detection system with low computer system resource overhead. Background technique [0002] During the running of the program, information is always passed between the internal objects of the program, thus forming an information flow and providing an entry point for program analysis. Contamination analysis is just one form of information flow analysis. In pollution analysis, untrustworthy data sources are considered as pollution sources, and they will be attached with some kind of label or flag to identify their pollution status. [0003] Dynamic pollution propagation is based on the above-mentioned basis, and the pollution propagation is carried out according to the rules during the execution of the program. The so-called taint propagation means: if the value of object A is directly derived from the value of tainted object B, or ...

AI Technical Summary

Problems solved by technology

This will make the final analysis results less accurate, and it will be impossible to discover as many software vulnerabilities and malicious codes as possible.

[0006] Existing related systems often have one or more of the following shortcomings: (1) requirements for program source files, (2) high computer system resource overhead, (3) lack of sufficient detection rules, these shortcomings limit these systems the use of

Images