Fragile code clone detection method and device based on vulnerability fingerprint

Abstract

The invention relates to a loophole fingerprint based vulnerability code clone detecting method and device. The method includes steps of collecting a code sample, and building a loophole database; selecting the loophole and searching the loophole patch information, and acquiring a vulnerability code sample; structuring a code analyzer; pretreating the vulnerability code sample by means of the codeanalyzer to obtain a standard middle expression; dividing the middle expression to be a code block with size of s line; calculating a characteristic value of the code block through a hash function, and combining to generate the loophole fingerprint; pretreating the code to be detected by means of the code analyzer and acquiring a characteristic value sequence of the code to be detected; mapping the loophole fingerprint to n bit of bit drawing; identifying if the characteristic value sequence is existed with vulnerability code clone by means of the bit drawing and outputting it. The method anddevice can effectively deal with the common code modifying method in the code cloning, well balance the relationship between the detecting efficiency and the detecting accuracy, and effectively detect the large-scale objects while keeping good accuracy.

Description

technical field [0001] The invention belongs to the technical field of computer software vulnerability mining, in particular to a vulnerability code clone detection method based on vulnerability fingerprints and a device thereof. Background technique [0002] Vulnerable codes refer to key codes that lead to software vulnerabilities, and cloning of vulnerable codes may introduce the same vulnerabilities during the development process. With the increasing popularity of Internet applications, the growing demand for software has led to the need for efficient development. Therefore, reuse based on existing components and code templates has become a common means of software development, and open source software (OSS) has also become an important tool to improve software development. Good solution for efficiency and quality as well as lower programming costs. However, numerous vulnerabilities in OSS will naturally lead to a large number of software vulnerabilities caused by code c...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the deficiencies in the prior art, the present invention provides a vulnerable code clone detection method based on vulnerability fingerprints and its device, which solves the high problems that occur when the code is modified to different degrees in the existing software vulnerable code clone detection process. In situations such as false negative rate, low detection efficiency, and limited application, the software vulnerability characteristics are obtained by preprocessing and feature extraction of vulnerable code samples, and vulnerability fingerprints are generated, which are used to identify and locate codes to be detected. Coping with multiple modification methods in code cloning, while efficiently detecting large-scale objects, it maintains a good accuracy rate and has a wide range of applications

Images