Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Symbolic execution method supporting multi-dimensional array and vulnerability detection system

A symbolic execution and multi-dimensional array technology, applied in the field of symbolic execution methods and vulnerability detection systems supporting multi-dimensional arrays, can solve problems such as program false positives, errors, etc., to reduce false positives and ensure practical feasibility

Active Publication Date: 2021-01-08
湖南泛联新安信息科技有限公司
View PDF2 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, when the complex data structure is a symbolic index of a multi-dimensional array, how to initialize and how large the array should be, and at the same time, program false positives or running errors caused by non-deterministic initialization results have become current problems that need to be solved

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Symbolic execution method supporting multi-dimensional array and vulnerability detection system
  • Symbolic execution method supporting multi-dimensional array and vulnerability detection system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0026] In order to make the technical solution of the present invention clearer and clearer to those skilled in the art, the present invention will be described in further detail below in conjunction with the embodiments and accompanying drawings. The features in the example can be combined with each other.

[0027] see figure 1 , figure 1 A flow chart of a symbolic execution method supporting multidimensional arrays provided in this embodiment, the method includes five steps.

[0028] S1: Analyze the program input value to determine whether the complex data structure is processed symbolically. If so, the complex data structure is processed by the lazy initialization method. Otherwise, the input data is processed by static symbolic execution. Among them, complex data structures refer to structures, linear linked lists, queues, trees, etc., and complex data structures are generally stored in the heap.

[0029] S2: When lazy initializing complex data structures, according to ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a symbolic execution method supporting a multi-dimensional array and a vulnerability detection system. The method comprises: when a program input value is a complex data structure, obtaining an optimal fixed length value according to manual setting and automatic adjustment, initializing the complex data structure, and when the complex data structure is accessed, obtaining the optimal fixed length value according to an access result by judging the validity of access offset, initializing a called data type and obtaining a specific numerical value, according to the accessresult, calling a constraint solver to solve the satisfiability of the path condition, calling a program counter, and triggering to calculate the specific value of the target code. The vulnerability detection system comprises a program instruction analysis module, a parameter analysis module, a symbol engine module and a test engine module. According to the method, the problem of lazy initialization failure for the complex data structure during symbolic execution is solved, the symbolization accuracy of the complex data structure can be ensured, and the program stability of symbolic executionunder the condition of the complex data structure is improved.

Description

technical field [0001] The invention relates to the technical field of symbolic execution, in particular to a symbolic execution method and a loophole detection system supporting multidimensional arrays. Background technique [0002] Symbolic execution is a program analysis technique that analyzes a program for inputs that cause specific regions of code to execute. When a program is analyzed using symbolic execution, the program uses symbolic values ​​as input instead of the concrete values ​​normally used to execute the program. When reaching the target code, the analyzer can get the corresponding path constraints, and then through the constraint solver to get the specific value that can trigger the target code. [0003] For simple programs, static symbolic execution can complete all actions, but when the program is large or complex, complex data structures become an important issue for symbolic execution. Usually complex data structures are handled by lazy initialization...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/36G06F21/57
CPCG06F11/3684G06F11/3688G06F21/577G06F2221/033
Inventor 蒋斌
Owner 湖南泛联新安信息科技有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com