Intelligent software security vulnerability scanning method based on static analysis

By constructing a change impact subgraph and a risk activation trusted comprehensive quantity, incremental risks in the software development process are identified and confirmed, solving the problem of insufficient incremental risk identification in existing technologies, improving detection efficiency and accuracy, reducing resource consumption and false alarm rate, and realizing the continuity and reusability of scanning.

CN122331950APending Publication Date: 2026-07-03SHANGHAI XUYIN TECHNOLOGY CO LTD
0 Cites 0 Cited by

Patent Information

Application Number
CN202610635160.6
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-05-09
Publication Date
2026-07-03

AI Technical Summary

Technical Problem

Existing technologies fail to effectively identify incremental risks caused by code changes during software development, especially the reactivation of historically dangerous paths. This results in high resource consumption for full scans and insufficient focus of analysis, lacking the ability to accurately identify incremental risks.

Method used

By obtaining source code snapshots of the baseline and modified versions, we identify the changed syntax nodes and dependencies, construct a set of changed elements, combine the baseline version's cache and historical hazard index to form a comprehensive change impact, construct a change impact subgraph, perform static incremental vulnerability analysis, identify newly added and activated risk paths, and conduct risk confirmation screening and baseline updates.

Benefits of technology

It improves the efficiency and accuracy of incremental risk detection, reduces redundant analysis of irrelevant code areas, enhances the ability to identify historical dangerous path activation issues, reduces false alarm rate, improves the availability and relevance of alarm output, and achieves continuous and reusable scanning.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention discloses an intelligent software security vulnerability scanning method based on static analysis, and particularly relates to the technical field of software security detection.The method comprises the steps that a baseline version source code snapshot and a change version source code snapshot corresponding to a to-be-detected software project are obtained, an alignment relation of front and back version program elements is established, and a change element set is formed; in combination with the baseline version program diagram cache, the function abstract cache and the historical dangerous point index, forming a change through influence comprehensive quantity and constructing a change influence subgraph; executing static incremental vulnerability analysis on the change influence subgraph, identifying a newly added risk path and an activated historical risk path, and forming a risk activation credible comprehensive quantity; and performing confirmation screening and baseline updating according to the risk activation credible comprehensive quantity, and outputting an effective increment alarm or a to-be-rechecked path. According to the method, the analysis range can be narrowed, the full-amount scanning resource consumption can be reduced, and the identification capability of incremental vulnerabilities and historical dangerous path activation situations can be improved.
Need to check novelty before this filing date? Find Prior Art