Software behavior detection system based on symbolic execution technology and detection method thereof

A symbolic execution and detection system technology, applied in the field of software behavior detection systems, can solve problems such as lag and time-consuming, and achieve the effects of enhanced accuracy and persuasiveness, complete detection results, and high program path coverage

Inactive Publication Date: 2011-10-19
THE THIRD RES INST OF MIN OF PUBLIC SECURITY
View PDF4 Cites 25 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Dynamic information is captured in real time, and the executed instructions are all valid, but the dynamic analysis method depends on the triggering timing of software behavior, and has the characteristics of lag and time-consuming in terms of software behavior detection

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Software behavior detection system based on symbolic execution technology and detection method thereof
  • Software behavior detection system based on symbolic execution technology and detection method thereof

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0028] In order to make the technical means, creative features, goals and effects achieved by the present invention easy to understand, the present invention will be further described below in conjunction with specific illustrations.

[0029] The present invention converts a program into a symbolic expression by using symbolic execution technology, collects the path constraints of the program during the execution of the program, and after the program is executed, according to the path selection strategy, a certain constraint condition in the current path constraint set is Negative, generate a new set of constraints, and use the constraint solver to solve it, get a set of solutions, the set can guide the program to execute the new path. Repeat this step to traverse the reachable paths in the program.

[0030] Based on above-mentioned principle, concrete implementation of the present invention is as follows:

[0031] see figure 1 The software behavior detection system 100 base...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a software behavior detection system based on symbolic execution technology and a detection method thereof, wherein the detection system consists of a constraint generation module, a constraint negation / optimization module, a constraint solution module, a binary code pile pitching module and a behavior monitor module; and the method specifically comprises the following steps of: monitoring software behavior in the actual execution process of a program, collecting information relevant to the behavior, and providing certain essential data for behavior analysis; and simultaneously, collecting the constraint condition of the current path; after the program execution is finished, negating a certain constraint condition in the set of collected path constraint conditions so as to acquire a new patch constraint set, and solving the newly generated new patch constraint set by using a solver so as to determine whether a path can be achieved; and if the preconditions traversing the patch can be met, triggering a new software behavior by traversing the path. The system and the method can efficiently improve the precision and comprehensiveness of behavior detection.

Description

technical field [0001] The invention relates to software behavior analysis technology, in particular to a software behavior detection system and a detection method based on the system. Background technique [0002] Software behavior analysis takes software as the object, conducts manual or automatic analysis through static or dynamic methods, to verify, confirm, monitor or discover the process and activities of software properties, and discover the behavior and functions of software. Intuitively speaking, the purpose of software behavior analysis is to understand what the software does or can do in the operating system. Software behavior detection refers to detecting software behavior, collecting behavior-related information, providing real-time software system operation, and providing basic data for software behavior analysis and prediction, so as to analyze software behavior of the system. [0003] Software behavior detection technology can be divided into static informat...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/34G06F11/36
Inventor 姚伟丁保贞宋铮杭强伟林九川赵帅
Owner THE THIRD RES INST OF MIN OF PUBLIC SECURITY
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap