Vulnerability detection method and device, server and storage medium

Abstract

The invention provides a vulnerability detection method and device, a server and a storage medium. The method includes: generating a source code set of an application by decompiling an application installation package; scanning file content of a source code file in the source code set to judge whether the source code file carries a first vulnerability feature or not; under the condition that the source code file carries the first vulnerability feature, performing semantic analysis on the source code file, detecting whether the source code file carries a second vulnerability feature matched with the first vulnerability feature based on a semantic analysis result of the source code file, and if the source code file carries the second vulnerability feature matched with the first vulnerabilityfeature, determining that the source code file has a vulnerability. According to the invention, whether the source code file possibly has the vulnerability or not is determined through the first vulnerability feature irrelevant to semantics; semantic analysis is performed on the source code file to determine whether the source code file really has the vulnerability on the basis that the source code file possibly has the vulnerability, so that the vulnerability detection of the source code file can be realized, and the vulnerability detection efficiency can be effectively improved.

Description

technical field [0001] The present invention relates to the technical field of loophole detection, and more specifically, to a loophole detection method, device, server and storage medium. Background technique [0002] Computer applications provide users with more convenient access to services. With the rapid increase in the number of computer applications, the security of computer applications is becoming more and more important. If there is a loophole in the computer application, once the loophole is invaded by an attacker, the privacy data of the user in the computer application may be stolen, a Trojan horse virus may appear in the terminal where the computer application is installed, and even serious economic losses may occur. [0003] Therefore, how to provide a vulnerability detection method, device, server and storage medium to realize the detection of vulnerabilities in computer applications, thereby reducing the possibility of computer applications being invaded by ...

AI Technical Summary

Problems solved by technology

If there are loopholes in the computer application, once the vulnerability is invaded by an attacker, the privacy data of the user in the computer application may be stolen, a Trojan horse virus may appear in the terminal where the computer application is installed, and even serious economic losses may occur.

Images