The invention discloses an incremental
vulnerability detection method and
system based on a symbolized function
side effect abstract, and the method comprises the steps: carrying out path sensitive sparse value flow analysis on an initial version, generating a change insensitive
side effect abstract in combination with
pointer analysis, constructing a sparse value flow graph, mining
vulnerability paths such as null pointer dereference,
memory leak and the like, and obtaining a sparse value flow graph; a two-layer structure
vulnerability search abstract is generated and persisted, in a subsequent version, only bottom-up increment
pointer analysis is triggered for a modification function, a cross-function
memory object is symbolized and abstracted, and SVFG is updated according to abstract
change propagation; and carrying out limited traversal type incremental vulnerability search around a newly added or closed
data stream edge. According to the method, through a bottom-to-top increment pointer and vulnerability search
mechanism based on abstract
change propagation, increment detection of vulnerabilities such as null pointer dereference and
memory leak in a
software iteration process is realized, repeated analysis is remarkably reduced, and
rapid identification of newly introduced vulnerabilities is supported.