A detection method and system for a heap controllable allocation vulnerability

Abstract

The invention discloses a detection method for a controlled heap allocation bug, having the advantages that the covering rate is higher than the covering rates of dynamic testing technologies such as Fuzzing, the accuracy of dynamic detection is realized, and the false alarm rate is low. The method comprises the first step: reverse analysis is carried out on a target study document to obtain functions and parameter information to be analyzed; the second step: the parameters of the functions to be analyzed are symbolized; the third step: the analysis which combines specific execution and symbolic execution is carried out on a target program by utilizing a symbolic execution engine; the fourth step: supervising and control analysis is carried out on a heap allocation function by using a binary system translation method; the fifth step: the allocation size needed by the heap allocation function is obtained by stacks, and whether the allocation size is a symbolic value is judged; the sixth step: the symbolic value is analyzed and solved; the seventh step: integer overflow analysis is carried out on the symbolic value size.

Description

technical field [0001] The invention relates to a detection method and system for heap controllable allocation loopholes, belonging to the field of operating system loophole detection. Background technique [0002] The safety of memory management is a very important part of the operating system security field, and the research on memory allocation and memory access safety is very important. Generally speaking, the methods of vulnerability mining are divided into static detection and dynamic running test. They refer to: [0003] Static detection: mainly through the security scanning of the source code of the software system, according to the data flow, control flow, semantics and other information in the program, it is matched with its unique software security rule base to find potential security vulnerabilities in the code. Static source code security testing is a very useful method. It can find out all codes that may have security risks during the coding stage, so that de...

AI Technical Summary

Problems solved by technology

However, when this kind of defect occurs, integer overflow occurs, so the possibility of heap buffer overflow will be greatly increased, which will lead to serious security risks.

Images