Vulnerability detection method and device based on optimization variation strategy, equipment and medium

Abstract

The invention provides a vulnerability detection method and device based on an optimization variation strategy, equipment and a medium. The method comprises the following steps: acquiring a source code of a target application program; compiling and instrumenting the source code to obtain an internal variable and a judgment condition of each branch in the structure of the source code, and forming a branch-internal variable mapping relationship; performing byte-by-byte change on each input byte included in an input variable of the target application program, determining an internal variable which changes along with the changed input byte in the source code, and obtaining an input byte-internal variable mapping relationship; based on the branch-internal variable mapping relationship and the input byte-internal variable mapping relationship, generating the optimization variation strategy about the input bytes; and performing fuzzy testing on the source code based on the optimization variation strategy to obtain a vulnerability detection result. According to the method and the device, rapid vulnerability detection of the source code of the application program is realized, the security of the application program is ensured from the source, and the vulnerability detection efficiency is improved.

Description

technical field [0001] The present disclosure relates to the field of computer technology, in particular to an application testing method, device, equipment and medium based on an optimization mutation strategy. Background technique [0002] With the rapid increase of the scale of the Internet and the rapid increase of the number of network users, various WEB-based network applications and services are also massively increasing. In recent years, along with more and more user demands, various application programs have also been continuously developed, prompting the scale of the source code of the application programs to continuously increase. There are many choices for the development language of the application. Because developers lack sufficient awareness of information security and network security, and do not pay enough attention to code quality and code security issues, there are some dangers in various applications. If the security loopholes are exploited by black prod...

AI Technical Summary

Problems solved by technology

There are many choices for the development language of the application program. Because developers lack sufficient awareness of information security and network security, and do not pay enough attention to code quality and code security issues, there are some dangers in various applications. If the security loopholes are exploited by black production personnel, it will cause huge losses to the enterprise and even individuals

However, due to the high coupling caused by programmers when developing applications, easily exploitable security vulnerabilities and code backdoors are no longer limited to the past forms. It is more difficult to detect security vulnerabilities in source code using traditional methods, which not only leads to vulnerabilities The efficiency of detection is reduced and the vulnerability cannot be effectively detected

Images