Vulnerability detection method and device for application program, equipment, storage medium and program

Abstract

Embodiments of the invention provide an application vulnerability detection method and apparatus, a device, a storage medium and a program. The method comprises the following steps: acquiring an executable file from an installation package of a to-be-detected application program, and decompiling the executable file to obtain a decompiled file; obtaining a plurality of elements in the decompiled file, establishing an index table based on the positions of the plurality of elements in the decompiled file, and establishing an incidence relation table based on the relation among the plurality of elements; generating a first abstract syntax tree taking a target element as a starting node according to the index table and the incidence relation table; and according to a plurality of groups of preset detection rules and the relationship among the nodes of the first abstract syntax tree, determining whether a vulnerability exists in the application program or not. According to the scheme, through the decompilation file, the index, the incidence relation table and the obtained abstract syntax tree, vulnerability detection can be easily carried out on the application program, and the vulnerability detection efficiency is high.

Description

Technical field [0001] The present invention relates to the field of computer technology, in particular to an application of vulnerability detection methods, devices, devices, storage media and programs. Background [0002] With the rapid development of the Android platform, the number of Android applications has been growing rapidly, but with it there are also vulnerabilities generated by Android applications. All Android application vulnerabilities have the potential to be exploited by attackers, so a more comprehensive understanding of the vulnerability, so that the vulnerability can be found and fixed, is an effective way to avoid software attacks. [0003] At present, vulnerability detection mainly converts the executable code in the installation package of the Android application into class assembly code through reverse tools, and then detects whether there is a security vulnerability based on the class assembly code. However, decompiling code such as class assembly obtain...

AI Technical Summary

Problems solved by technology

However, decompiled codes such as assembly classes obtained through reverse tools are not easy to understand, and it is difficult to detect security vulnerabilities based on such decompiled codes.

Images