Project knowledge tree construction and retrieval method

Abstract

The invention relates to a project knowledge tree construction and retrieval method. The method comprises the steps of traversing all folders and files of a project to construct a project directory tree; extracting features of each file of the project, wherein the features of each file comprise file features of the file and function features of each function in the file; constructing a project knowledge tree for describing the project by using a plurality of Json object arrays based on the project directory tree and the characteristics of each file of the project; and using a retrieval mode based on a project retrieval structure or a retrieval mode based on file features and function features to realize retrieval of the project knowledge tree through a Solr full-text retrieval engine. Through the method and the device, the fragments of the files and the file functions which are the same as those of the tested project can be quickly positioned, so that the carding association relationship is clearer, and the project knowledge base has better readability.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method for constructing and retrieving project knowledge trees. Background technique [0002] With the development of informatization, the application of software is becoming more and more extensive, and more and more open source projects are used by software and hardware companies, which brings about license permission issues, security issues, how to evaluate the proportion of source code, etc. . In order to solve these problems, a code composition analysis system is needed, which can collect open source project and version information, and can analyze the code composition, permission issues and security issues of the tested project. [0003] When there are a large number of source code warehouses (including project information, version information, and project release packages), the remaining core part is how to detect the composition of the project under test. It is unr...

AI Technical Summary

Problems solved by technology

[0011] At present, Black duck has been maturely applied and occupies the main global user base of source code analysis. However, due to trade restrictions in the United States, the open source code base of this software is not sold to China. Only by uploading source code files or binary files, you can use the software online. The detection service scans and analyzes software composition, which has confidentiality and security issues, which is not allowed for military software, so military software cannot use this software service for code composition analysis

Black duck did not disclose how to match, and related information was found on the Internet

Images