Auditing method and device for code detection result
A technology for code detection and detection results, applied in the field of auditing for code detection results, to reduce workload, improve calculation accuracy, and reduce system security risks
Pending Publication Date: 2021-06-11
CCB FINTECH CO LTD
View PDF4 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0004] In view of this, embodiments of the present invention provide an audit method and device for code detection results, which can automatically identify false positives in the detection results output by code detection tools based on artificial intelligence technology, thereby improving audit efficiency
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0035] Exemplary embodiments of the present invention are described below in conjunction with the accompanying drawings, which include various details of the embodiments of the present invention to facilitate understanding, and they should be regarded as exemplary only. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the invention. Also, descriptions of well-known functions and constructions are omitted in the following description for clarity and conciseness.
[0036] It should be noted that, in the case of no conflict, the embodiments of the present invention and the technical features in the embodiments can be combined with each other.
[0037] figure 1 It is a schematic diagram of main steps of an audit method for code detection results according to an embodiment of the present invention.
[0038] Such as figure 1 As shown,...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses an auditing method and device for a code detection result, and relates to the technical field of artificial intelligence. A specific embodiment of the method comprises the steps of obtaining a detection result of a code detection tool for a target code, wherein the detection result comprises detail data of at least one initial problem detected by the code detection tool; extracting feature data of each initial problem from the detail data of the initial problem, inputting the feature data of each initial problem into a pre-trained false alarm discrimination model, and determining a false alarm problem in the initial problems according to an output result of the false alarm discrimination model; and removing a misinformation problem in the initial problem to realize auditing of the detection result. According to the embodiment, the false alarm problem in the detection result output by the code detection tool can be automatically judged based on the artificial intelligence technology, so that the auditing efficiency is improved.
Description
technical field [0001] The invention relates to the technical field of artificial intelligence, in particular to an audit method and device for code detection results. Background technique [0002] As an important security detection method in IT system security testing, code detection (also called code security scanning) has been paid more and more attention by the industry. The core of code detection is source code analysis technology, including data flow analysis, state machine system, boundary detection, data type verification, control flow analysis and other technologies. With the continuous evolution of computer languages, code detection technology is also becoming more and more perfect. In different segments, many source code analysis products (ie code detection tools) have emerged, such as Klocwork Insight, Coverity, Fortify and Checkmarx. Code detection tools are currently scanning code statically, and all detections are carried out in accordance with "rules". It is...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/36G06Q10/10G06N7/00
CPCG06F11/3692G06Q10/103G06N7/01
Inventor 夏伟阳骁尧邹为涂耀旭程东旭郑娜威毛道娟
Owner CCB FINTECH CO LTD