一种用于识别引入Linux内核漏洞的Git提交的方法和系统
By identifying CVE vulnerability data in the Linux kernel and using multiple methods to automatically identify Git commits, this technology solves the problem of difficulty in identifying Git commits with Linux kernel vulnerabilities in existing technologies, achieving efficient vulnerability detection and security enhancement.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- ZHEJIANG UNIV
- Filing Date
- 2023-02-20
- Publication Date
- 2026-07-17
AI Technical Summary
Existing methods for identifying Linux kernel vulnerabilities, such as the SZZ algorithm and its variants, are difficult to apply in the Linux kernel and cannot effectively identify Git commits that introduce vulnerabilities, resulting in low vulnerability detection accuracy. Furthermore, the Linux kernel lacks vulnerability tracking and management tools and commit tagging specifications, making it difficult to obtain Git commits that fix vulnerabilities in batches.
By acquiring CVE vulnerability data from the Linux kernel, the system automatically identifies Git commits that fix vulnerabilities (KVFC) and Git commits that introduce vulnerabilities (KVIC) using web crawlers and various methods, and manually handles conflicts when they occur. The system establishes a correspondence between KVFC and KVIC, and uses CVE data acquisition, KVFC identification, and KVIC identification modules to achieve automated and manual verification.
This implementation enables batch Git commits for obtaining Linux kernel vulnerabilities, improving the accuracy of vulnerability detection, reducing the likelihood of vulnerabilities being introduced, and enhancing the security of the Linux kernel.
Smart Images
Figure CN116305140B_ABST