A software update patch security detection method and system

Abstract

The invention discloses a patch security detecting method and system for software update.The method comprises the steps that by means of conducting preprocessing on patches, intermediate code analysis is conducted to obtain basic blocks affected by the patches, memory sensitive functions and variables thereof are obtained by means of the basic blocks affected by the patches, and a main execution path is constructed by starting from the memory sensitive functions; in the process of conducting symbolic execution on the path, the specific path condition is determined, and when the specific memory sensitive function is reached, the path condition at this time is combined with a corresponding security detector to judge whether a software update security problem exists or not.The patch security detecting method and system for the software update focus on detecting the security of different parts, relative to an older version, of the new version after software is updated, the problems that in an existing patch security detection scheme, the false positive rate and false negative rate are high, the efficiency is low due to duplicate detection, and overdependence on test set effectiveness exists are solved, the detection efficiency is significantly improved, and the accuracy of patch security detection is further improved.

Description

technical field [0001] The invention belongs to the safety field in software reliability research, and in particular relates to a software update patch safety detection method and system. Background technique [0002] Software update iterations are an important part of the software life cycle, and software patches are used to add or delete software functions, or to fix known bugs. However, not all patches are safe. Some patches fail to fix existing bugs or introduce new security issues, causing software crashes and even affecting the entire computer system. How to quickly and accurately detect and locate the possible security problems of the patch is of great significance to the security of the software and the stability of the entire system platform. [0003] Traditional software security testing schemes treat the entire software as a whole, and the main analysis techniques include static analysis, dynamic analysis and symbolic execution. Static analysis analyzes a progra...

AI Technical Summary

Problems solved by technology

[0006] Aiming at the defects or improvement needs of the prior art, the present invention provides a software update security detection method and system, the purpose of which is to solve the false alarm rate and omissions existing in the existing security detection scheme for software update. High reporting rate, repetitive detection leads to low efficiency and over-reliance on the validity of the test set, providing an efficient and accurate security detection method for patches

Images