Operating system vulnerability detection method and system based on code similarity analysis and medium

Abstract

The invention discloses an operating system vulnerability detection method and system based on code similarity analysis and a medium. The method comprises the steps: locating a vulnerability code segment, and forming an operating system vulnerability code library; screening an operating system source code library; for the vulnerability code segment, respectively generating a code attribute graph set by an operating system source code library; and respectively extracting features from the vulnerability function in the vulnerability code segment and the code attribute graph set of each functionto be tested in the operating system source code library, calculating similarity, detecting whether reuse of the vulnerability code exists or not, and outputting a result. The method aims at solving the problems that an existing vulnerability code reuse detection method is insufficient in detection capacity when oriented to large-scale software systems such as an operating system. By adopting themethods of screening the operating system source code library, progressively screening the multi-vulnerability characteristics and the like, the process of the existing detection method is improved and optimized, and good accuracy is considered while high operating efficiency is ensured.

Description

technical field [0001] The present invention relates to the technical field of computer program detection and operating system vulnerability analysis, in particular to an operating system vulnerability detection method, system and medium based on code similarity analysis. Background technique [0002] Code reuse refers to directly copying or slightly modifying a piece of code in one software, and then using it in other software as a component of the latter's code. At present, using existing code components or templates for software development has become a common and common method in software engineering. In 2018, Blackduck conducted reuse analysis and auditing of open source components on anonymous data in more than 1,100 commercial code bases, covering big data, network security, enterprise software, financial services, healthcare, Internet of Things, automotive, manufacturing And mobile application market and other industries. The audit results showed that open source c...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention: aiming at the above-mentioned problems of the prior art, a kind of operating system vulnerability detection method, system and medium based on code similarity analysis is provided. Large-scale software systems such as operating systems have insufficient detection capabilities, low accuracy of detection results, and low detection efficiency. Screening operating system source code libraries, basic information, token sequences, and control flow paths are vulnerable The existing vulnerability code reuse detection process has been improved and optimized by means of progressive screening of vulnerability feature sets, while ensuring high operating efficiency and good accuracy

Images