System and method for automatic program analysis based on strategy

Abstract

The invention relates to a system and a method for automatic program analysis based on a strategy. The system comprises a data source, analysis units, and a dispatching management program. The data source is a set of to-be-analyzed software. The analysis unit is a packaged software analysis module, and is used to communicate with a scheduler, to complete program security analysis of a certain method or a certain stage of assigned software. The dispatching management program is used to configure an analysis strategy, and realizes dispatching and management of an analysis task through analyzing the configured analysis strategy and monitoring states of the plurality of analysis units, to form effective joining and combination of each analysis unit. Through the pre-configured strategy and global task dispatching, a plurality of analysis modules or a plurality of analysis stages are automatically joined, so as to realize a complete, efficient, and automatic analysis process of a program.

Description

technical field [0001] The invention relates to the technical field of system security, in particular to a strategy-based automatic program analysis system and method. Background technique [0002] With the rapid development of computers and smart terminals, and the increasing popularity of the Internet and mobile Internet, software has become an indispensable part of people's daily life and work. However, at the same time, more and more malicious software and vulnerable software have appeared, which have brought various direct or indirect threats and harms to software users and the whole society. [0003] Malicious software, especially mobile phone malware, poses a hazard to the property and privacy information security of users. For example, the malicious deduction of mobile phone malware has accounted for a very high proportion of various harmful behaviors. The "black economic chain" of malicious deduction of mobile phone bundled software was also exposed at the CCTV 315...

AI Technical Summary

Problems solved by technology

However, since the scheduler cannot use the knowledge of static analysis, it can only continue to assign tasks to the dynamic sandbox according to the output of static analysis, thus wasting precious computing resources

Another scenario is that due to the limitations of the Android emulator, some software cannot run normally in the emulator under certain conditions. The dynamic analysis based on the emulator may miss malicious behaviors, and the real machine dynamic analysis module needs to be detected separately. , but because the scheduler cannot obtain this information, it cannot schedule the real machine dynamic analysis module

Images