The present invention discloses a Spectre
vulnerability protection system and method based on a
fixed point algorithm, relates to the technical field of computer
attack security analysis, and solves the technical problem that the prior art fails to distinguish whether a protection statement has a Spectre
vulnerability when protecting a program, thereby causing excessive statement protection and program performance loss. The present invention obtains a program from a
database, marks the program with sensitive information, and tracks the sensitive information based on a bit
granularity algorithm to obtain a secret value; retrieves a
security domain, sets a
security level label, determines a state domain according to the
security level label, sequentially executes the program to obtain an over-estimated value; calculates a state transition of the program configuration according to the over-estimated value; obtains the protected program based on a fixed point, and adds defense to the program according to the fixed point; the present invention specifically protects statements that may cause Spectre vulnerabilities, thereby reducing performance loss caused by protection.