Software vulnerability model detection method based on vulnerability model

Abstract

The invention discloses a software vulnerability model detection method based on a vulnerability model, which comprises the following steps of: performing state derivation on execution input, a software calling process and a function set of software so as to judge whether state transition exceeds a safe range or not; feature code scanning and specific function or specific process detection can be carried out on the public vulnerabilities to determine whether the software system has the vulnerabilities or not; for unknown vulnerabilities, whether a software system has vulnerabilities or not can not be obtained through direct detection generally, and due to the fact that the unknown vulnerabilities often cause the vulnerabilities for specific execution processes and / or specific input conditions of unsafe codes, the method solves the problem that the vulnerabilities cannot be generated in the process of system vulnerability detection and protection in Web application at present. In the prior art, the privacy of data information cannot be effectively protected, and an attacker can identify the information of the Web site accessed by the user according to the contour features of the Web information flow, so that the Web content of the user is leaked.

Description

technical field [0001] The invention belongs to the technical field of vulnerability model detection, in particular to a software vulnerability model detection method based on a vulnerability model. Background technique [0002] The negligence of software developers when developing software, or the limitations of programming languages. For example, the C language family is more efficient than Java but has more loopholes. Computer systems are almost compiled in C language, so patches are often required. Software loopholes are sometimes discovered by the author in future inspections and then corrected; some people specifically find other people's loopholes to do some illegal things, and when the author knows that their loopholes are exploited by others, they will try to remedy them. [0003] At present, there are many system loopholes on the market, which make the system have great security risks when using it, and the existence of loopholes seriously affects the stability and...

AI Technical Summary

Problems solved by technology

[0004] The technical problem to be solved by the present invention is to overcome the existing defects and provide a software vulnerability model detection method based on the vulnerability model, so as to solve the problem that the system loopholes on the market are constantly emerging in the above-mentioned background technology, so that the system has more problems when it is used. Large security risks, and the existence of loopholes seriously affect the stability and flexibility of the system, it is easy to be discovered by system attackers and use the loopholes to attack the system, so there is great inconvenience and security risks when using The problem

Images