Method of tracing software abnormal behaviors based on software functional layer

Abstract

The invention discloses a method of tracing software abnormal behaviors based on a software functional layer. The method includes: firstly, capturing system call sequences of software functions, and figuring out a standard operating sequence of each software function state sequence; secondly, adopting software functions as points of interest of program slices, and establishing a program slicing criterion of each software function; thirdly, establishing software function transferring charts during normal software operation; and finally, acquiring a test sequence of each software function in the testing sequences, matching with the test sequence with the standard operating sequence, and detecting software abnormal behaviors. According the method, higher-layer software state models can be extracted on the basis of system call, software modeling is performed according to software function transferring manners, whether or not the software functions are abnormal can be judged by detecting errors of function state sequences, program slices are made on software abnormal behaviors, and the purpose of software tracing is achieved; reasons for software abnormal behaviors are found out from the root, and control of software behavior creditability is improved.

Description

Technical field:

[0001] The invention aims at establishing a software function model, identifying abnormal software behavior, and tracing the source of the abnormal behavior. Background technique:

[0002] The behavior of software refers to the process of software operation performance and state evolution. Software behavior is defined as the application, operation, or action of an object when the software is running as a subject, relying on its own functions. The untrustworthy behavior of software will cause different degrees of damage to society, so it is necessary to study the credibility of software behavior. The behavior of software can describe software behavior at different levels from binary instructions at the bottom to high-level program statements, functions, system calls, etc. The behavior state sequence and state transition constructed according to a certain level of behavior information can characterize the normal behavior characteristics of the software , and...

Images