The present invention provides a
security analysis method and
system for a distributed sandbox based on a
large model, and relates to the field of
security analysis of large models. The technical solution is as follows: the
original data of a distributed data sandbox is obtained, and preliminary screening is performed based on a
large model adversarial review method to obtain a preliminary screening sample; the preliminary screening samples are respectively calculated based on a plurality of similarity algorithms to obtain a mixed similarity; an
abstract syntax tree is compiled based on a
threat program of the preliminary screening sample to obtain a
dependency graph, and the nodes in the
dependency graph are traversed to perform nested
directed acyclic graph modeling to obtain a nested relationship graph; labels are added to the nested relationship
graph based on the mixed similarity and sliced to obtain a subgraph, and the similar subgraphs are traversed and matched based on an existing
threat program
library to obtain a subgraph similarity, and a weighted calculation is performed to obtain a static
threat score. The present invention proposes a
hybrid calculation method and a nested relationship representation method, which improves the problem that traditional
static analysis is difficult to effectively analyze threat programs and has a high misjudgment rate.