A vulnerability detection method, electronic device and storage medium

Abstract

The present invention provides a method for vulnerability detection, comprising the following steps: obtaining a target readable instruction list and a target task list, obtaining a designated readable instruction list corresponding to the target readable instruction list, and performing vulnerability detection on the target readable instruction according to the designated readable instruction list, wherein target risk information and a target risk position are determined, and a designated detection position is obtained according to the target risk position, and when a target function does not exist at the designated detection position, it is determined that a vulnerability exists in the target readable instruction, and when a target function exists at the designated detection position, a target risk coefficient corresponding to the target readable instruction is obtained, and vulnerability detection of the target readable instruction is performed based on the target risk coefficient. The present invention screens tasks based on feature data of codes corresponding to the tasks, thereby narrowing the scope of vulnerability analysis and improving the efficiency of vulnerability detection, and detecting vulnerabilities based on risk coefficients corresponding to information associated with risk data, so that the accuracy of vulnerability detection is high.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a vulnerability detection method, electronic equipment and storage medium. Background Art

[0002] With the rapid development of Internet technology, more and more enterprises and organizations rely on information systems and applications to support their core business operations. However, these systems and applications often have various security risks in the design and implementation process. Business logic vulnerabilities have become a relatively hidden and far-reaching category. Business logic vulnerabilities refer to business-related defects caused by incomplete and unreasonable business logic design or process design. For example, business logic vulnerabilities appear in payment transactions, unauthorized access, password retrieval and other functions. Attackers can bypass the system's security control by exploiting business logic vulnerabilities, obtain sensitive information, perform unauthorized operations or conduct malicious attacks, thereby causing significant losses to the system. Therefore, how to detect and prevent vulnerabilities has become an important research direction.

[0003] The vulnerability detection method in the prior art is to form fixed detection rules based on the attack characteristics of the vulnerability, and to discover the corresponding defect code through methods such as keyword matching and context analysis to realize the detection of the vulnerability.

[0004] In summary, the vulnerability detection method has the following problems: inaccurate keyword matching can easily lead to false positives or missed positives; vulnerabilities are constantly updated and cannot adapt to new task scenarios and vulnerability characteristics, which reduces the accuracy of vulnerability detection; tasks are not screened based on the corresponding source code characteristics, which increases maintenance costs and complexity. Summary of the invention

[0005] In view of the above technical problems, the technical solution adopted by the present invention is: a vulnerability detection method, comprising the following steps:

[0006] S100, obtaining a target readable instruction list, wherein the target readable instruction list includes a plurality of target readable instructions, and the target readable instructions are source codes corresponding to tasks executed during the interaction between the user and the system.

[0007] S200, obtaining a target task list corresponding to a target readable instruction list, wherein the target task list includes a plurality of target tasks, and each target readable instruction corresponds to one target task.

[0008] S300, obtaining a designated readable instruction list corresponding to a target readable instruction list, wherein the designated readable instruction list includes a plurality of designated readable instructions, each target readable instruction corresponds to a designated readable instruction, and the designated readable instruction is a code corresponding to a process part involved in executing a target task corresponding to the target readable instruction obtained from the target readable instruction.

[0009] S400, performing vulnerability detection on target readable instructions according to the specified readable instruction list, wherein S400 also includes the following steps:

[0010] S401, determining target risk information and target risk position according to the target task and the designated readable instruction corresponding to the target task.

[0011] S402, acquiring a designated detection position according to the target risk position, wherein the designated detection position is a position before the designated readable instruction target risk position.

[0012] S403: When the target function does not exist at the designated detection position, determine that a vulnerability exists in the target readable instruction, wherein the target function is a function for verifying target risk information.

[0013] S404, when there is a target function at the designated detection position, obtain a target risk coefficient corresponding to the target readable instruction, wherein the target risk coefficient is the ratio of the number of target functions existing at the designated detection position to the number of designated functions corresponding to the target task corresponding to the target risk information in the target database.

[0014] S405, when the target risk coefficient meets a preset condition, determining that the target readable instruction has no vulnerability, wherein the preset condition is not less than a preset coefficient threshold.

[0015] S406, when the target risk coefficient does not meet the preset condition, determining that the target readable instruction has a vulnerability to detect the vulnerability.

[0016] The present invention protects an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned vulnerability detection method when executing the computer program.

[0017] The present invention protects a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned vulnerability detection method is implemented.

[0018] The present invention has at least the following beneficial effects: The present invention is a method for vulnerability detection, comprising the following steps: obtaining a target readable instruction list, obtaining a target task list corresponding to the target readable instruction list, obtaining a designated readable instruction list corresponding to the target readable instruction list, and performing vulnerability detection on the target readable instruction according to the designated readable instruction list, wherein, according to the target task and the designated readable instruction corresponding to the target task, determining the target risk information and the target risk position, obtaining the designated detection position according to the target risk position, when the designated detection position does not have a target function, determining that the target readable instruction has a vulnerability, when the designated detection position has a target function, obtaining the target risk coefficient corresponding to the target readable instruction, when the target risk coefficient meets a preset condition, determining that the target readable instruction does not have a vulnerability, and when the target risk coefficient does not meet the preset condition, determining that the target readable instruction has a vulnerability to detect the vulnerability. The present invention screens tasks based on feature data of codes corresponding to the tasks, narrows the scope of vulnerability analysis, improves the efficiency of vulnerability detection, and detects vulnerabilities based on risk coefficients corresponding to information associated with risk data, which is not prone to false positives or negative positives, thereby making vulnerability detection more accurate. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0020] Figure 1 A flowchart of a vulnerability detection method provided by an embodiment of the present invention;

[0021] Figure 2 This is a flowchart of step S100 provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0022] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0023] Example

[0024] An embodiment of the present invention provides a vulnerability detection method, the method comprising the following steps: Figure 1 As shown:

[0025] S100, obtaining a target readable instruction list, wherein the target readable instruction list includes a plurality of target readable instructions, and the target readable instructions are source codes corresponding to tasks executed during the interaction between the user and the system.

[0026] Specifically, in S100, the target readable instruction is obtained through the following steps: Figure 2 As shown:

[0027] S1, obtain the initial readable instruction list A = {A1, ..., A i , ..., A n}, where A i is the i-th initial readable instruction, i=1...n, and n is the number of initial readable instructions.

[0028] Specifically, the initial readable instructions are code blocks obtained by splitting the source code based on the task type.

[0029] S2, according to A, obtain the first target string list B corresponding to A = {B1, ..., B i , ..., B n} and the second target string list set B corresponding to B 0 = {B 0 1, ..., B 0 i , ..., B 0 n}, B 0 i = {B 0 i1 , ..., B 0 ij , ..., B 0 im(i)}, where B i A i The corresponding first target string, B 0 ij For B i The jth second target string in the corresponding second target string list, j=1...m(i), m(i) is B i The number of second target character strings in the corresponding second target character string list.

[0030] Specifically, the first target character string is a task name character string corresponding to the initial readable instruction obtained from the initial readable instruction.

[0031] Specifically, the second target string is the elements required to execute the task corresponding to the initial readable instruction obtained from the initial readable instruction, such as: data return type, parameter type, variable name and other elements, wherein it can be understood that: the code of each task in the Java source code will correspond to three parts of content, the first part includes the content of the comment, the second part includes the method declaration corresponding to the task, and the third part includes the implementation process corresponding to the task. The first target string is the comment content obtained from the first part of the Java code, and the second target string is several elements corresponding to the method declaration obtained from the second part.

[0032] S3, obtain the first sample string list P = {P1, ..., P r , ..., P s}、The second sample string list set Q corresponding to P={Q1,……,Q r , ..., Q s}, Q r = {Q r1 , ..., Q rv , ..., Q rb(r)} and the sample weight list corresponding to P = {F1, ..., F r , ..., F s}, P r is the rth first sample string, r=1…s, s is the number of first sample strings, Q rv P r The vth second sample string in the corresponding second sample string list, v=1...b(r), b(r) is P r The number of second sample strings in the corresponding second sample string list, F r P r The corresponding sample weights.

[0033] Specifically, the first sample character string is a name character string corresponding to an executed task involved in the process of interaction between the user and the system, such as query, payment, transfer and other tasks.

[0034] Specifically, the second sample character string is an element required to execute the task corresponding to the first sample character string. Those skilled in the art know that the type of the element can be determined according to actual needs, all of which fall within the protection scope of the present invention and are not described in detail here, for example: elements such as data return type, parameter type and variable name.

[0035] Specifically, the sample weight is the importance of the first sample character string. Those skilled in the art know that the sample weight can be set according to actual needs, which falls within the protection scope of the present invention and will not be described in detail here.

[0036] S4, according to P, Q and F, obtain the initial priority list set C corresponding to A = {C1, ..., C i , ..., C n}, C i ={C i1 , ..., C ir , ..., C is}, C i A i The corresponding initial priority list is the rth initial priority, where C ir Meet the following conditions:

[0037] Among them, BP ir For B i With P r The similarity between rv ij For B 0 ij With Q rv The similarity between .

[0038] Specifically, those skilled in the art know that any method for obtaining the similarity between two character strings in the prior art falls within the protection scope of the present invention and will not be described in detail herein.

[0039] S5, according to C, obtain the target priority list D corresponding to A = {D1, ..., D i , ..., D n}, D i A i The corresponding target priority, where C ir C i When the initial priority is the largest, determine D i =F r .

[0040] S6, when D i ≥F 0 When D i The corresponding initial readable instruction is the target readable instruction, where F 0 is the preset weight threshold.

[0041] Specifically, F 0 The value range of F is 0.6 to 0.8, wherein those skilled in the art know that F can be adjusted according to actual needs. 0 The selection of all falls within the protection scope of the present invention and will not be repeated here.

[0042] In the above, several initial readable instructions are obtained, and the target priority corresponding to the initial readable instructions is obtained based on the first target string and the second target string corresponding to the initial readable instructions. The initial readable instructions are filtered according to the target priority to obtain the target readable instructions, and the tasks are filtered based on the characteristic data of the code corresponding to the task, which narrows the scope of vulnerability analysis and improves the efficiency of vulnerability detection.

[0043] S200, obtaining a target task list corresponding to a target readable instruction list, wherein the target task list includes a plurality of target tasks, and each target readable instruction corresponds to one target task.

[0044] Specifically, the target task is a task acquired based on the first sample character string included in the target readable instruction, such as query, payment, transfer and other tasks.

[0045] S300, obtaining a designated readable instruction list corresponding to a target readable instruction list, wherein the designated readable instruction list includes a plurality of designated readable instructions, each target readable instruction corresponds to a designated readable instruction, and the designated readable instruction is a code corresponding to a process part involved in executing a target task corresponding to the target readable instruction obtained from the target readable instruction.

[0046] S400: Perform vulnerability detection on target readable instructions according to the specified readable instruction list.

[0047] In a specific embodiment, S400 also includes the following steps:

[0048] S401, determining target risk information and target risk position according to the target task and the designated readable instruction corresponding to the target task.

[0049] Specifically, the target risk information is the code corresponding to the actual occurrence steps of the target task in the target readable instruction.

[0050] Furthermore, the designated readable instructions can be understood as a call chain corresponding to the target task, and the target risk information is the code corresponding to the actual steps of the target task in the call chain. For example, when the target task is payment, the target risk information is the code at the step in the call chain where the actual payment process appears.

[0051] Specifically, the target risk position is the position of the target risk information in the specified readable instruction.

[0052] S402, acquiring a designated detection position according to the target risk position, wherein the designated detection position is a position before the designated readable instruction target risk position.

[0053] S403: When the target function does not exist at the designated detection position, determine that a vulnerability exists in the target readable instruction, wherein the target function is a function for verifying target risk information.

[0054] S404, when there is a target function at the designated detection position, obtain a target risk coefficient corresponding to the target readable instruction, wherein the target risk coefficient is the ratio of the number of target functions existing at the designated detection position to the number of designated functions corresponding to the target task corresponding to the target risk information in the target database.

[0055] Specifically, the target database stores a plurality of target tasks and a plurality of designated functions corresponding to each target task, and the designated function is a function for verifying the target task.

[0056] S405, when the target risk coefficient meets a preset condition, determining that the target readable instruction has no vulnerability, wherein the preset condition is not less than a preset coefficient threshold.

[0057] Specifically, the value range of the preset coefficient threshold is 0.9 to 1. Those skilled in the art know that the preset coefficient threshold can be selected according to actual needs, which falls within the protection scope of the present invention and will not be described in detail here.

[0058] S406, when the target risk coefficient does not meet the preset condition, determining that the target readable instruction has a vulnerability to detect the vulnerability.

[0059] As described above, vulnerability detection based on the risk coefficient of data associated with risk data is less likely to cause false positives or negative positives, making vulnerability detection more accurate.

[0060] In another specific embodiment, S400 also includes the following steps:

[0061] S410, determining target risk information and target risk position according to the target task and the designated readable instruction corresponding to the target task.

[0062] Specifically, the target risk information is the code corresponding to the actual occurrence steps of the target task in the target readable instruction.

[0063] Furthermore, the designated readable instructions can be understood as a call chain corresponding to the target task, and the target risk information is the code corresponding to the actual steps of the target task in the call chain. For example, when the target task is payment, the target risk information is the code at the step in the call chain where the actual payment process appears.

[0064] Specifically, the target risk position is the position of the target risk information in the specified readable instruction.

[0065] S412, acquiring a designated detection position according to the target risk position, wherein the designated detection position is a position before the designated readable instruction target risk position.

[0066] S413, when the target function does not exist at the designated detection position, determining that a vulnerability exists in the target readable instruction, wherein the target function is a function for verifying the target risk information.

[0067] Furthermore, the designated priority may be dynamically adjusted based on the result of vulnerability detection. Those skilled in the art know that any method of dynamically adjusting the importance in the prior art falls within the protection scope of the present invention and will not be described in detail herein.

[0068] S414, when there is a target function at the designated detection position, obtaining a designated risk coefficient corresponding to the target readable instruction, wherein the designated risk coefficient is a maximum value of a designated priority corresponding to the target function.

[0069] S145, when the specified risk coefficient is not less than the critical risk coefficient, determine that the target readable instruction does not have a vulnerability, wherein the critical risk coefficient is the maximum value of the specified priority of the specified function corresponding to the target task corresponding to the target risk information obtained from the specified database.

[0070] Specifically, the designated database stores several target tasks, several designated functions corresponding to each target task, and a designated priority corresponding to each designated function, wherein the designated function is a function for verifying the target task, and the designated priority is the importance of the designated function.

[0071] S415, when the specified risk factor is less than the critical risk factor, determining that a vulnerability exists in the target readable instruction to detect the vulnerability.

[0072] In the above, vulnerabilities are detected based on the weights of data associated with risk data, and the weights of associated data are dynamically adjusted, which is less likely to cause false positives or negative positives, making the accuracy of vulnerability detection higher.

[0073] A vulnerability detection method provided by an embodiment of the present invention includes the following steps: obtaining a target readable instruction list, obtaining a target task list corresponding to the target readable instruction list, obtaining a designated readable instruction list corresponding to the target readable instruction list, and performing vulnerability detection on the target readable instruction according to the designated readable instruction list, wherein target risk information and target risk position are determined according to the target task and the designated readable instruction corresponding to the target task, and a designated detection position is obtained according to the target risk position. When the designated detection position does not have a target function, it is determined that there is a vulnerability in the target readable instruction. When the designated detection position has a target function, a target risk coefficient corresponding to the target readable instruction is obtained. When the target risk coefficient meets a preset condition, it is determined that there is no vulnerability in the target readable instruction. When the target risk coefficient does not meet the preset condition, it is determined that there is a vulnerability in the target readable instruction to detect the vulnerability. The embodiment of the present invention screens tasks based on feature data of codes corresponding to the tasks, narrows the scope of vulnerability analysis, improves the efficiency of vulnerability detection, and detects vulnerabilities based on risk coefficients corresponding to information associated with risk data, which is not prone to false positives or negative positives, so that the accuracy of vulnerability detection is high.

[0074] An embodiment of the present invention further provides a non-transitory computer-readable storage medium, which can be set in an electronic device to store at least one readable instruction or at least one program for implementing a method in a method embodiment, and the at least one readable instruction or the at least one program is loaded and executed by the processor to implement:

[0075] S100, obtaining a target readable instruction list, wherein the target readable instruction list includes a plurality of target readable instructions, and the target readable instructions are source codes corresponding to tasks executed during the interaction between the user and the system.

[0076] S200, obtaining a target task list corresponding to a target readable instruction list, wherein the target task list includes a plurality of target tasks, and each target readable instruction corresponds to one target task.

[0077] S300, obtaining a designated readable instruction list corresponding to a target readable instruction list, wherein the designated readable instruction list includes a plurality of designated readable instructions, each target readable instruction corresponds to a designated readable instruction, and the designated readable instruction is a code corresponding to a process part involved in executing a target task corresponding to the target readable instruction obtained from the target readable instruction.

[0078] S400, performing vulnerability detection on target readable instructions according to the specified readable instruction list, wherein S400 also includes the following steps:

[0079] S401, determining target risk information and target risk position according to the target task and the designated readable instruction corresponding to the target task.

[0080] S402, acquiring a designated detection position according to the target risk position, wherein the designated detection position is a position before the designated readable instruction target risk position.

[0081] S403: When the target function does not exist at the designated detection position, determine that a vulnerability exists in the target readable instruction, wherein the target function is a function for verifying target risk information.

[0082] S404, when there is a target function at the designated detection position, obtain a target risk coefficient corresponding to the target readable instruction, wherein the target risk coefficient is the ratio of the number of target functions existing at the designated detection position to the number of designated functions corresponding to the target task corresponding to the target risk information in the target database.

[0083] S405, when the target risk coefficient meets a preset condition, determining that the target readable instruction has no vulnerability, wherein the preset condition is not less than a preset coefficient threshold.

[0084] S406, when the target risk coefficient does not meet the preset condition, determining that the target readable instruction has a vulnerability to detect the vulnerability.

[0085] An embodiment of the present invention further provides an electronic device, including a processor and the non-transitory computer-readable storage medium, wherein the storage medium may be provided in the electronic device to store at least one readable instruction or at least one program for implementing a method in the method embodiment, wherein the at least one readable instruction or the at least one program is loaded and executed by the processor to implement:

[0086] S100, obtaining a target readable instruction list, wherein the target readable instruction list includes a plurality of target readable instructions, and the target readable instructions are source codes corresponding to tasks executed during the interaction between the user and the system.

[0087] S200, obtaining a target task list corresponding to a target readable instruction list, wherein the target task list includes a plurality of target tasks, and each target readable instruction corresponds to one target task.

[0088] S300, obtaining a designated readable instruction list corresponding to a target readable instruction list, wherein the designated readable instruction list includes a plurality of designated readable instructions, each target readable instruction corresponds to a designated readable instruction, and the designated readable instruction is a code corresponding to a process part involved in executing a target task corresponding to the target readable instruction obtained from the target readable instruction.

[0089] S400, performing vulnerability detection on target readable instructions according to the specified readable instruction list, wherein S400 also includes the following steps:

[0090] S401, determining target risk information and target risk position according to the target task and the designated readable instruction corresponding to the target task.

[0091] S402, acquiring a designated detection position according to the target risk position, wherein the designated detection position is a position before the designated readable instruction target risk position.

[0092] S403: When the target function does not exist at the designated detection position, determine that a vulnerability exists in the target readable instruction, wherein the target function is a function for verifying target risk information.

[0093] S404, when there is a target function at the designated detection position, obtain a target risk coefficient corresponding to the target readable instruction, wherein the target risk coefficient is the ratio of the number of target functions existing at the designated detection position to the number of designated functions corresponding to the target task corresponding to the target risk information in the target database.

[0094] S405, when the target risk coefficient meets a preset condition, determining that the target readable instruction has no vulnerability, wherein the preset condition is not less than a preset coefficient threshold.

[0095] S406, when the target risk coefficient does not meet the preset condition, determining that the target readable instruction has a vulnerability to detect the vulnerability.

[0096] Although some specific embodiments of the present invention have been described in detail by way of example, it will be appreciated by those skilled in the art that the above examples are for illustration only and are not intended to limit the scope of the present invention. It will also be appreciated by those skilled in the art that various modifications may be made to the embodiments without departing from the scope and spirit of the present invention. The scope of the present invention is defined by the appended claims.

Claims

1. A vulnerability detection method, characterized in that: The method comprises the following steps: S100, obtaining a target readable instruction list, wherein the target readable instruction list includes a plurality of target readable instructions, and the target readable instructions are source codes corresponding to tasks executed during the interaction between the user and the system. In S100, the target readable instructions are obtained through the following steps: S1, obtain the initial readable instruction list A = {A1, ..., A i , ..., A n }, where A i is the i-th initial readable instruction, i=1...n, n is the number of initial readable instructions; S2, according to A, obtain the first target string list B corresponding to A = {B1, ..., B i , ..., B n } and the second target string list set B corresponding to B 0 = {B 0 1, ..., B 0 i , ..., B 0 n }, B 0 i = {B 0 i1 , ..., B 0 ij , ..., B 0 im(i) }, where B i A i The corresponding first target string, B 0 ij For B i The jth second target string in the corresponding second target string list, j=1...m(i), m(i) is B i the number of second target strings in the corresponding second target string list, the first target string being a task name string corresponding to the initial readable instruction obtained from the initial readable instruction, and the second target string being an element required to execute the task corresponding to the initial readable instruction obtained from the initial readable instruction; S3, obtain the first sample string list P = {P1, ..., P r , ..., P s }、The second sample string list set Q corresponding to P={Q1,……,Q r , ..., Q s }, Q r = {Q r1 , ..., Q rv , ..., Q rb(r) } and the sample weight list corresponding to P = {F1, ..., F r , ..., F s }, P r is the rth first sample string, r=1…s, s is the number of first sample strings, Q rv P r The vth second sample string in the corresponding second sample string list, v=1...b(r), b(r) is P r The number of second sample strings in the corresponding second sample string list, F r P r The corresponding sample weights; S4, according to P, Q and F, obtain the initial priority list set C corresponding to A = {C1, ..., C i , ..., C n }, C i ={C i1 , ..., C ir , ..., C is }, C i A i The corresponding initial priority list is the rth initial priority, where C ir Meet the following conditions: Among them, BP ir For B i With P r The similarity between rv ij For B 0 ij With Q rv The similarity between S5, according to C, obtain the target priority list D corresponding to A = {D1, ..., D i , ..., D n }, D i A i The corresponding target priority, where C ir C i When the initial priority is the largest, determine D i =F r ; S6, when D i ≥F 0 When D i The corresponding initial readable instruction is the target readable instruction, where F 0 is the preset weight threshold; S200, obtaining a target task list corresponding to a target readable instruction list, wherein the target task list includes a plurality of target tasks, and each target readable instruction corresponds to one target task; S300, obtaining a designated readable instruction list corresponding to a target readable instruction list, wherein the designated readable instruction list includes a plurality of designated readable instructions, each target readable instruction corresponds to a designated readable instruction, and the designated readable instruction is a code corresponding to a process part involved in executing a target task corresponding to the target readable instruction obtained from the target readable instruction; S400, performing vulnerability detection on target readable instructions according to the specified readable instruction list, wherein S400 also includes the following steps: S401, determining target risk information and a target risk position according to a target task and a designated readable instruction corresponding to the target task, wherein the target risk information is a code corresponding to an actual step of the target task in the target readable instruction, and the target risk position is a position of the target risk information in the designated readable instruction; S402, acquiring a designated detection position according to the target risk position, wherein the designated detection position is a position before the designated readable instruction target risk position; S403, when the target function does not exist at the designated detection position, determining that the target readable instruction has a vulnerability, wherein the target function is a function for verifying the target risk information; S404, when there is a target function at the designated detection position, obtaining a target risk coefficient corresponding to the target readable instruction, wherein the target risk coefficient is a ratio of the number of target functions at the designated detection position to the number of designated functions corresponding to the target task corresponding to the target risk information in the target database; S405, when the target risk coefficient meets a preset condition, determining that the target readable instruction does not have a vulnerability, wherein the preset condition is not less than a preset coefficient threshold; S406, when the target risk coefficient does not meet the preset condition, determining that the target readable instruction has a vulnerability to detect the vulnerability.

2. The vulnerability detection method according to claim 1, characterized in that: F 0 The value range is 0.6~0.

8.

3. A non-transitory computer-readable storage medium, characterized in that: The storage medium stores at least one readable instruction or at least one program, and the at least one readable instruction or the at least one program is loaded and executed by the processor to implement the method as claimed in any one of claims 1-2.

4. An electronic device, characterized in that: The invention comprises a processor and the non-transitory computer-readable storage medium as claimed in claim 3.

Images