Code auditing rule base generation method and device, equipment and medium

Abstract

The invention discloses a code auditing rule base generation method and device, equipment and a medium. The method comprises the following steps: obtaining a plurality of existing auditing rule sets;wherein each audit rule set comprises one or more audit rules, and each audit rule has corresponding rule description; according to the rule description, carrying out category division on audit rulescontained in each audit rule set; and uniformly recording the auditing rules belonging to the same category in a corresponding data directory in a redundancy removal manner, and generating a code auditing rule base for technical personnel to perform code auditing according to the code auditing rule base. The code auditing rule base generated by the method has good base maintenance capability, canrelatively reduce the overall manpower cost required by code auditing, and ensures the comprehensiveness and accuracy of code auditing. In addition, the invention further provides a code auditing rulebase generation device and equipment and a medium, and the beneficial effects are the same as those mentioned above.

Description

technical field [0001] The invention relates to the field of software development, in particular to a method, device, equipment and medium for generating a code audit rule base. Background technique [0002] Picking up the standardization of software source code in accordance with the code audit rules is an important part of security audit work. Due to the constraints of the industry background of the implementing unit, the maturity of program development, and maintenance capabilities, a set of code audits in compliance with the internal requirements of the enterprise The rule base is particularly important. [0003] A rule base with high availability can often meet the needs of internal development of the enterprise, and it is also convenient for developers to make targeted corrections. However, there are so many audit rules on the market today, so in the process of code audit, counting personnel are required to conduct audits in combination with the relatively scattered a...

AI Technical Summary

Problems solved by technology

However, there are so many audit rules on the market today, so in the process of code audit, counting personnel are required to conduct audits in combination with the relatively scattered audit rules of each enterprise, because there is a high degree of redundancy between the existing audit rules of each enterprise At the same time, there may be certain differences. Therefore, in the process of code auditing, technical personnel with high professional background need to spend a lot of energy on identifying rules, so that the code can be audited relatively comprehensively. Therefore, the current implementation of code The overall human cost required for auditing is relatively large, and it is difficult to ensure the overall comprehensiveness and accuracy of code auditing

Images