Vulnerable code clone detection method, device, electronic equipment and storage medium

Abstract

The present invention provides a vulnerability code clone detection method, device, electronic equipment and storage medium, wherein the method includes: slice the code of the function to be detected to obtain a plurality of slices to be detected; combine the plurality of slices to be detected with the preset vulnerability All the vulnerability slices corresponding to the vulnerable functions stored in the library are slice-matched to obtain the detection result of the vulnerable code clone of the function to be detected; wherein, the vulnerability slice corresponding to the vulnerable function contains the statement that needs to be deleted in the vulnerable function and Other statements that have a dependency relationship with the statement that needs to be deleted. The vulnerability code cloning detection method, device, electronic equipment and storage medium provided by the present invention realize Type-3 code cloning detection, improve the comprehensiveness and accuracy of vulnerability code cloning detection, and reduce the missed detection rate of vulnerabilities. And it can accurately locate the location of the vulnerability information in the function to be detected.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method, device, electronic device and storage medium for detecting vulnerability code clones. Background technique [0002] With the rapid development of the computer software industry, the amount of open source software is also growing. Related research shows that the amount of open source software has transformed from linear growth to non-linear growth. While the number of open source software has grown, so has the number of vulnerabilities associated with open source software. [0003] The development of open source software and the need for rapid and low-cost software development have resulted in a large number of code reuse phenomena. In order to quickly implement requirements, software developers will directly make changes to existing code and apply them to the developed software. Although the development of open source software can improve the speed of so...

AI Technical Summary

Problems solved by technology

[0007] Therefore, most current detection algorithms for vulnerable code clones do not consider the semantic information in the code, and the operations on the source code are limited to abstract operations such as replacing variable names, type names, and parameter names, as well as standard operations such as deleting spaces and comments. Type-1 and Type-2 code clones that can detect vulnerable codes have a high false negative rate

Images