Method for establishing vulnerability model based on chemical abstract machine

Abstract

The invention discloses a method for establishing a vulnerability model based on a chemical abstract machine and belongs to the field of trusted computing. The method comprises the steps that 1, a vulnerability internal-cause characterization method is designed based on a data control flow diagram; 2, vulnerability attributes are extracted by analyzing vulnerability examples in a public vulnerability library, and expression and description of the types and causes of the vulnerability model are achieved; 3, chemical abstract machine semantics of the vulnerability are established based on the vulnerability attributes; 4, chemical abstract machine vulnerability models of an internal cause and an external cause are established based on the chemical abstract machine semantics of the vulnerability. In addition, a preliminary prototype system-vulnerability model analysis system is also achieved, the method is compared with other bug mining tools, and the effectiveness of the method is verified. The method can help to further deeply know the essence of the vulnerability, is conductive to the improvement of vulnerability acquaintance, and accordingly helps to reduce the losses brought by the vulnerability to national security, economic stability and social development.

Description

technical field [0001] The invention belongs to the field of trusted computing, and relates to a method for constructing a vulnerability model based on a chemical abstract machine, including proposing a method for characterization of internal factors of vulnerability, extracting vulnerability attributes and constructing a vulnerability model based on a chemical abstract machine. Background technique [0002] With the continuous development of the Internet and software technology, software plays an increasingly important role in the process of social development. However, at the same time, the number of software vulnerabilities is increasing, showing a growing trend, and causing more and more harm, which poses a certain degree of threat to national security, economic stability and social development. The study of sexuality has gradually attracted the attention of scholars at home and abroad. [0003] The research on software vulnerability began in the 1970s. Researchers devo...

AI Technical Summary

Problems solved by technology

[0004] These initial research results at home and abroad provide basic information for our research, but there are still some problems in the analysis of the causes of vulnerability and characteristics, such as the difficulty of formally describing the causes of vulnerability, and none of them reflect the causes of vulnerability. valid models of etc.

Images