Mixed-source file license conflict detection method

Abstract

The invention relates to a method for detecting permission conflict of mixed-source files, comprising: step 1) building a code license library and a feature knowledge base; step 2) extracting feature values ​​of mixed-source files; step 3) acquiring allowable attributes of mixed-source files; step 4 ) obtain the restricted attribute of the target open source file; step 5) compare the allowable attribute of the mixed source file with the restricted attribute of the target open source file, to record the license agreement compliance of the mixed source file when they are the same If it is a conflict, otherwise, record the license agreement compliance of the mixed source file as not conflicting; Step 6), Step 7): continue to judge the compliance of the license agreement; Step 8) record the mixed source file. If the license agreement compliance of the source file is in violation, the mixed source file is marked as ineligible, otherwise, it is marked as compliant. Through the present invention, the analysis of the complex structure of the mixed-source file can be completed, and the accurate judgment of the license agreement compliance of the mixed-source file can be realized.

Description

technical field [0001] The invention relates to the field of file detection, in particular to a method for detecting license conflicts of mixed-source files. Background technique [0002] At present, open source code and third-party plug-ins are widely used in mixed-source software, and the knowledge products and security risks caused by them have attracted a certain amount of attention and attention abroad. The existing achievements mainly include two mature software, Blackduck and Protecode in the United States. These two sets of mature software are widely used in American law firms, intellectual property offices, corporate audit departments, software contractors and other units, and are also applied to large-scale software in other countries. Company and business audit unit. [0003] (1)Blackduck [0004] Blackduck (Black Duck Software) is currently the code analysis software with the largest market share, but Blackduck mainly implements source code scanning, auditing a...

AI Technical Summary

Problems solved by technology

[0026] In order to solve the above problems, the present invention provides a license conflict detection method for mixed-source files. Aiming at the problem of complex structure of mixed-source codes, intelligent analysis is carried out by using multi-level features such as function interfaces, function relationships, and code structures to realize mixed-source Composition analysis of the code and accurate positioning of the open source code. By analyzing the commercial code license information contained in the code and comparing the information of the open source license agreement, the quantitative analysis of the software license compliance is realized, and data support is provided for the compliance of the software. Focusing on the security and intellectual property risks caused by the complexity of open source software and the diversity of licenses, innovatively carry out technical research related to software analysis, focusing on breakthroughs in mixed-source code intelligent detection and analysis capabilities, license compliance analysis capabilities, and license conflicts Code analysis capabilities such as identification and positioning capabilities

Images