Code auditing method and device, equipment and computer readable storage medium

Abstract

The invention discloses a code auditing method and device, equipment and a computer readable storage medium. The method comprises the steps of obtaining an operation instruction for a target object ina preset code auditing system; operating the target object according to the operation instruction, and taking a preset code auditing system containing the operated target object as a target code auditing system; performing code auditing based on the target code auditing system to obtain an auditing result; wherein the type of the target object comprises a to-be-judged input set, a dangerous operation set and a safe processing operation set; wherein the types of the operation instructions comprise addition, deletion and modification. In the present application, a target object in a preset codeauditing system can be operated by means of an operation instruction; and the preset code auditing system containing the operated target object is used as the target code auditing system, so that a user can flexibly adjust the preset code auditing system according to needs, the adaptability of the code auditing system is enhanced, and the expandability of code auditing is improved.

Description

technical field [0001] The present application relates to the technical field of computer security, and more specifically, to a code auditing method, device, equipment and computer-readable storage medium. Background technique [0002] Code audit refers to checking the security flaws in the source code, checking whether there are potential security risks in the source code of the program, or where there are irregularities in the coding, and checking and analyzing the source code of the program one by one through automated tools or manual review methods. Security holes caused by these source code flaws, and code revision measures and recommendations are provided. Code auditing is widely used in scenarios such as vulnerability mining and security development process. There are also some automated code auditing tools on the market for enterprises or individuals to use, but these automated tools have poor scalability and often cannot adapt to the code style of the project itself...

AI Technical Summary

Problems solved by technology

Code auditing is widely used in scenarios such as vulnerability mining and security development process. There are also some automated code auditing tools on the market for enterprises or individuals to use, but these automated tools have poor scalability and often cannot adapt to the code style of the project itself, and even popular None of the open source R&D frameworks can adapt, which leads to a large number of false positives and loopholes in the scan results

Images