Danger function identification method and related equipment

Abstract

The invention discloses a dangerous function identification method and device, a server, a computer readable storage medium and a computer program product. According to the method, functions possibly having potential safety hazards can be automatically screened out by means of massive knowledge of a large language model through matching query of functions and vulnerabilities, the dangerous function recognition efficiency is remarkably improved through the automatic matching mode, and the burden of manual review is reduced; besides, the functions are closely combined with a specific vulnerability mode through correlation analysis of the component functions, so that the functions which possibly cause specific types of security vulnerabilities can be specifically identified, blind inspection of the whole code library is avoided, and the functions which really have potential safety hazards can be positioned more quickly and accurately; in addition, irrelevant warnings or false positives can be effectively reduced, irrelevant functions are filtered out by clearly inquiring functions relevant to vulnerability types, and the false alarm rate is reduced.

Images