70 results about "Program analysis" patented technology

The invention discloses an intelligent contract vulnerability detection method and system based on semantic comprehension and program path analysis, and belongs to the technical field of network security. The method comprises the following steps: firstly, analyzing an intelligent contract code by using a large language model, and reasoning to generate a structured security rule for defining a taint source, a taint sink and a purifier; secondly, guiding a taint analysis engine by using a security rule, and tracking on a data flow and a control flow diagram of a program so as to efficiently screen out a high-risk taint path; then, carrying out reachability verification on the high-risk path by adopting a symbolic execution technology; and finally, performing final context review on the verified vulnerability path by using the large language model again to generate a vulnerability report. According to the method, the semantic comprehension ability of the large language model and the preciseness of traditional program analysis are subjected to multi-stage cooperation, so that the detection precision and efficiency of the intelligent contract logic vulnerability can be remarkably improved, the interpretability of a report result is greatly enhanced, and the method has important application value.

The invention relates to a program analysis method and device, electronic equipment, a storage medium and a computer program product, and the method comprises the steps that before a target program runs, a sampling buffer area is allocated to the target program, and the sampling buffer area comprises sampling buffer partitions allocated for each instruction in the target program; when any sampling moment is reached in the running process of the target program, instruction counter sampling is carried out, a sampling instruction of this time is determined, and a sampling counter in a target sampling buffer partition corresponding to the sampling instruction of this time is updated through atomic operation; after the operation of the target program is finished, determining the total sampling frequency of each instruction in the target program according to the sampling buffer area; and according to the total sampling frequency of each instruction in the target program, performing performance analysis on the target program to obtain a performance analysis result. According to the embodiment of the invention, the operation of the target program is not influenced under the condition that the sampling precision is ensured, and the performance analysis of the target program is effectively realized.

The invention discloses a dependency visualization method and device and a storage medium, and relates to the technical field of program analysis, and the method comprises the steps: obtaining and analyzing a metadata file, constructing a business element mapping relation based on the association between a code element and a use case as well as extension, then traversing all class files through a class reader, a method calling instruction list is generated based on the method calling information obtained through traversal and the business element mapping relation, and the method calling instruction list comprises a caller, a callee, a calling type and business target information; then, on the basis of the method calling instruction list, the method, the use case and the extension serve as nodes, the calling relation serves as an edge, and a graph data structure is constructed; and outputting the interactive dependency graph based on the graph data structure. According to the method, the technical effect of visually displaying the dependency relationship between the methods can be achieved.

This invention provides a privacy protection method and system for preventing misbehavior in mini-programs based on deep learning. It utilizes the collaborative efforts of deep learning and program analysis techniques to detect inconsistencies between the expected and actual behavior of mini-programs. This invention provides a novel mini-program analysis technique that associates UI information of widgets with corresponding program behaviors and determines the actual behavior of widgets based on program analysis, thereby enabling the construction of large-scale, high-quality training datasets. Based on the results of program analysis, deep learning techniques are used to learn an icon-behavior model from unstructured datasets to infer the expected behavior of widgets. This invention uses a defined three-layer standard model to detect differences between actual and expected behavior by calculating outlier scores. If any inconsistency is found, it indicates the presence of a misbehaving mini-program. The risk level of the inappropriate behavior can then be estimated, and countermeasures can be proactively implemented.

The invention relates to the technical field of computers, in particular to a metamorphic relation identification method based on program dependency graph features. The method comprises the following steps: obtaining a control flow graph (CFG) of a target program, and obtaining a control dependency graph according to the control flow graph and a forward dominating tree; obtaining a program dependency graph according to the control dependency graph and the data dependency relationship; according to a program analysis requirement slicing criterion C = (N, V) of a target program, graph traversal is conducted on the program dependency graph, program slicing features are obtained, N represents instructions in the target program, and V represents a variable set; and inputting the program slice features into a target prediction model for identification, and obtaining a prediction result corresponding to the metamorphic relationship of the target program. By the adoption of the method and device, the metamorphic relation obtaining accuracy can be improved, the situation that the metamorphic relation cannot be obtained is reduced, program testing convenience can be improved, and software quality is improved.

The invention relates to the technical field of numerical control programming, and provides a numerical control program analysis method and device. The method comprises the following steps: mapping a first numerical control program into a second numerical control program according to instruction conversion information; simulating the second numerical control program to obtain an original simulated processing track; performing parameter-level optimization and / or interaction-level optimization on the original simulation processing track to obtain an optimized simulation processing track, and visualizing the original simulation processing track and the optimized simulation processing track; wherein the instruction conversion information represents a corresponding relation between the first numerical control program and the second numerical control program; the parameter level optimization comprises at least one of arc-to-small line segment conversion, fine smoothing, coarse smoothing and local point processing; interaction level optimization includes at least one of zoom, rotation, and translation. According to the numerical control program analysis method and device provided by the invention, the numerical control program programming and simulation efficiency and accuracy can be improved.

The application relates to the technical field of binary program analysis and rewriting, and discloses an immediate number symbolization judgment method and system of a binary rewriting program, which comprises a preprocessing step, a basic evidence analysis step, an intermediate evidence analysis step, a high-level evidence analysis step and a fusion decision step. The preprocessing layer carries out structural analysis and semantic modeling on a binary file, extracts candidate immediate numbers and meta information, the basic evidence layer carries out preliminary weighting based on explicit rules, the intermediate evidence layer carries out quantitative evaluation through heuristics and statistical patterns, the high-level evidence layer carries out high-precision analysis on the immediate numbers with semantic ambiguity, the fusion decision layer summarizes the evidences at all levels, forms a comprehensive tendency value through weighted calculation, classifies the immediate numbers, and generates a final symbolization strategy. The application significantly improves the accuracy and interpretability of symbolization judgment, balances the analysis precision and processing efficiency, and is suitable for binary files of different compilers, platforms and file stripping states.

Numerical control device capable of providing an interface that performs safe task control for adding an original function, wherein the numerical control device comprises: - a memory management unit that is set up to develop or initialize a program executed by a task in memory, analyze the program, and gather information about the program, - an execution time calculation unit that is set up to calculate an execution time of the task, - an execution condition setting unit configured to set an execution condition of the task based on the execution results of the memory management unit and the execution time calculation unit, - a task monitoring unit that is configured to monitor the state of a computing unit and to determine the computing unit to which the task is assigned, and - a task control unit that is configured to register and start the task in the assigned computing unit based on the execution condition.

This disclosure provides a program analysis method, apparatus, and electronic device, relating to the field of computer technology, and particularly to the field of computer software technology. The specific implementation scheme is as follows: Obtaining the abstract syntax tree (AST) corresponding to the program file to be analyzed; searching the AST based on the preset feature codes to determine a first code file containing the preset feature codes, wherein the preset feature codes identify the execution process of the program file to be analyzed; counting the number of preset feature codes contained in the first code file and the number of sub-preset feature codes of the preset feature codes to obtain a first statistical result, wherein the sub-preset feature codes are sub-codes containing the preset feature codes; displaying the first statistical result. This demonstrates the reliability of the program file to be analyzed, enabling developers to more accurately determine whether the program file to be analyzed is reliable.

A system (100) or method (500) for preventing or mitigating malicious processes in a computing environment having one or more processors (204) and memory (202) operatively coupled to the one or more processors can include computer instructions which when executed causes the one or more processors to perform certain operations. The operations can include intercepting (502) all file system input and output paths using a kernel driver (103), analyzing (504) for suspect behaviors in real time on data being processed through the input and output paths and data access patterns on a live system implemented in a kernel of an operating system for the computing environment, flagging (512) the data for any suspect behaviors, and preventing (514) further processing upon detection of the suspect behaviors.

The invention relates to a method and a system for automatically generating a SysML v2 visual analysis model of system engineering, belongs to the technical field of program analysis, and solves the problem that a traditional system engineering document cannot be effectively and automatically modeled in the prior art. The method comprises the following steps: converting an input initial system engineering design document into a document structured representation model; extracting related document contents from the document structured representation model according to user modeling requirements, extracting related knowledge entries from a pre-configured domain knowledge base, and extracting related case entries from a pre-configured modeling case library; and inputting the extracted document content, knowledge entries and case entries as context information into a large language model, and generating a SysML v2 visual analysis model of the system engineering by using the large language model according to the modeling requirement of a user. Based on the document structured representation model, the field knowledge base and the modeling case base, automatic analysis and modeling of the system engineering document are achieved.

The present disclosure relates to a program analysis method and device, electronic equipment, storage medium and computer program product, the method comprising: allocating a sampling buffer for a target program before the target program runs, the sampling buffer comprising a sampling buffer partition allocated for each instruction in the target program; when reaching any sampling moment during the running of the target program, performing instruction counter sampling, determining the sampling instruction, and updating the sampling counter in the target sampling buffer partition corresponding to the sampling instruction through atomic operation; after the running of the target program ends, determining the total sampling number of each instruction in the target program according to the sampling buffer; and performing performance analysis on the target program according to the total sampling number of each instruction in the target program to obtain a performance analysis result. According to the embodiments of the present disclosure, the performance analysis on the target program can be effectively implemented without affecting the running of the target program under the condition of ensuring sampling accuracy.

A program analysis apparatus includes a first code block extraction means for extracting a first code block having a specific property from codes included in a binary of a program, a second code block extraction means for extracting a second code block performing a predetermined sensitive operation from the codes included in the binary of the program, a relationship information acquisition means for acquiring relationship information indicating a relationship on a control flow between the first code block and the second code block, a backdoor score calculation means for calculating a backdoor score based on content of the predetermined sensitive operation in the first code block and performing addition and subtraction of the backdoor score with respect to the first code block based on the relationship information, and an output means for outputting the first code block and the backdoor score for the first code block.

The data collection device (10) includes a control program collection unit (122) that collects control programs that control production equipment placed on a production line, an input unit (17) that accepts input of specific conditions, a control program analysis unit (123) that analyzes the control program to identify candidate data storage areas for collection that store device data to be collected that meet specific conditions among the data storage areas used in the control program, a data collection unit (14) that collects selected device data, which is device data stored in a data storage area selected by the user from among the candidate data storage areas for collection, and an output unit (16) that outputs the selected device data to an external device.

Provided is technology enabling improvement in efficiency of an evaluation step when a failure occurs due to vibration of actual processing. An estimation device 10 comprises: a display-side communication unit 12 that acquires, by communication, control information from a control unit 3 that controls a machine tool; a parameter acquisition unit 13 that acquires a control parameter of the control unit 3; a machining condition input unit 14 that inputs a machining condition of the machine tool; a machining program analysis unit 15 that analyzes a machining program; an estimated frequency calculation unit 16 that calculates an estimated frequency that is a frequency of vibration that can be generated, on the basis of at least one of the control parameter, the machining condition, and the machining program; an operation data acquisition unit 17 that acquires operation data of at least one of a position deviation, a speed, and a current value; a frequency analysis unit 18 that analyzes a frequency component of the operation data; a determination unit 19 that determines the magnitude of the frequency component; and an output unit 20 that outputs information for superimposing and displaying calculation results of the estimated frequency calculation unit and the frequency analysis unit, and switches whether or not to display the calculation result of the estimated frequency calculation unit according to the magnitude of the frequency component.

The application belongs to the technical field of program analysis, and relates to a real-time memory recovery method and system for process memory and instruction sequence fusion. The method comprises the following steps: establishing an index for memory pages in a process memory dump file to form a memory page index; analyzing an instruction record file to establish a mapping relationship between an instruction ID and a file position and form an instruction index; scanning memory patch files in a specified directory, generating incremental memory checkpoints at specified intervals based on the memory page index, the instruction index and the memory patch files; according to a target instruction ID and a memory address, using the memory checkpoints and incremental data to quickly restore and query the memory state at a target time, and using a multi-level cache mechanism to improve the memory query performance. The application realizes efficient processing and fast query of large process memory dump data, and solves the problems of large memory dump file size, low query efficiency and excessive storage space occupation in the prior art.

This application belongs to the fields of software security, program analysis, and big data technology. Specifically, it discloses a method, apparatus, and device for constructing a multi-granularity vulnerability assessment dataset. The method includes: for multiple data sources, crawling raw data and performing data cleaning, deduplication, and cross-data source entity linking to obtain a unified vulnerability entity; based on the unified vulnerability entity, using abstract syntax tree analysis and in-process data dependency and control dependency analysis to obtain code slices and patch pair samples of different granularities; performing multi-dimensional annotation of metadata information to obtain annotated samples with vulnerability information, context integrity level, and compilation information; based on the annotated samples, obtaining a positive sample set and a negative sample set through positive sample filtering and negative sample construction; and performing data fusion, dynamic filtering, and structured encapsulation to construct a target vulnerability assessment dataset. This application enables the effective construction of vulnerability assessment datasets.

A machining program editing assist device includes a CAD data analysis unit which analyzes CAD data of a workpiece after a change, and acquires CAD shape information about the workpiece after the change, and a machining program analysis unit which analyzes a machining program before the change, and acquires machining shape information about the workpiece before the change. The device also includes an input shape prediction unit which acquires predicted shape information by performing shape matching between the CAD shape information and the machining shape information before the change, and specifying a modified shape, and an NC program auto-generation unit which, based on the predicted shape information, inserts a machining route that is existing only in the CAD data into the machining program, and deletes a machining route that is present only in the machining program from the machining program.

Provided are a numerical controller and a numerical control system capable of monitoring the operation of a robot control device while a robot is operated by a command from a numerical control program of the numerical controller. A numerical controller controls a robot having a main shaft for machining a workpiece by using a numerical control program, the numerical controller including: a program analysis unit that analyzes the numerical control program; a spindle setting unit that generates spindle setting information; a spindle control determination unit that notifies a spindle control device or a data transmission / reception unit of the spindle control command on the basis of the spindle setting information; and a data transmission / reception unit that, when the main shaft is controlled by the robot control device, notifies the robot control device of the main shaft control command, the main axis control device controls the main axis on the basis of the main axis control command notified from the main axis control determination unit or the robot control device.

The invention provides a binary program analysis method and device, electronic equipment and a storage medium, and the binary program analysis method comprises the steps: carrying out the dynamic analysis of a to-be-analyzed binary program, and obtaining a dynamic analysis result; performing static analysis on the to-be-analyzed binary program to obtain a static analysis result; if it is determined that an analysis ending condition is not met based on the static analysis result and the dynamic analysis result, jumping to the step of carrying out dynamic analysis on the binary program to be analyzed to obtain a dynamic analysis result until the analysis ending condition is met; and when jumping to the step of dynamically analyzing the to-be-analyzed binary program to obtain a dynamic analysis result, determining a dynamic analysis strategy through the analysis decision agent, and dynamically analyzing the to-be-analyzed binary program based on the dynamic analysis strategy. According to the method, an analysis decision agent is introduced to determine a dynamic analysis strategy, dynamic analysis and static analysis are combined, analysis information is accumulated in round iteration, and the to-be-analyzed binary program is accurately analyzed.

Systems and method for translating computer code using augmented program analysis. Augmented program metadata for a target computer code from an original code can be constructed by generating target class structure and target method prototype. Extraneous code can be filtered from the original code based on determined code compatibility to obtain filtered source code. A prompt can be generated using pairs of the augmented program metadata and the filtered source code that are fed to a trained large language model to obtain generated translated code. The generated translated code can be optimized to ensure code compilability, avoid redundancies, and enhance memory handling. A computer software application can be translated by compiling generated translated code.

This invention belongs to the field of software engineering technology, specifically disclosing a method and system for suppressing hallucinations in program analysis agents based on structured cue words. The method includes: extracting structured feature information from the code to be analyzed; constructing multi-dimensional structured cue words based on the extracted structured features; inputting the structured cue words into a large language model for analysis; performing multi-stage intermediate result verification on the analysis results of the large language model; locating the hallucination source based on the verification results; constructing correction cue words to guide the large language model in self-correction; and aggregating the verified analysis results to generate a final program analysis report. This invention significantly improves the accuracy of the large language model's understanding of code structure and semantics, reducing the probability of hallucinations from the source.

The invention belongs to the technical field of software security and program analysis, and particularly discloses a function semantic abstract increment updating method based on call chain influence analysis, which comprises the following steps of: constructing a function call graph of an initial code, determining a processing sequence according to a topological sequence of the function call graph, generating and storing initial semantic abstracts corresponding to all functions, constructing an initial semantic abstract library; analyzing the code difference between the new code and the initial code, and identifying changed and newly added functions to determine an affected function set and obtain an update processing sequence; generating a new semantic abstract of each influenced function based on the updating processing sequence, performing semantic comparison on the new semantic abstract and historical abstracts in a semantic abstract library, and updating the semantic abstract library when semantic change is determined; and updating version information of the semantic abstract library, and outputting a latest function semantic abstract set and an abstract change report. According to the method and the device, increment updating can be quickly carried out while the accuracy of generating the abstract is ensured to be improved.

This program causes a computer to function as: a feature data acquisition unit (103) that acquires feature data (205) indicating features of device log data (201) of a PLC or a controlled device, or features of event log data (202) of the PLC or the controlled device; a similarity calculation unit (106) that determines the similarity between the feature data (205) acquired by the feature data acquisition unit (103) and feature data (205) stored in a database (200) in association with analysis process data (204) indicating analysis processes; an extraction unit (107) that, on the basis of the similarity, extracts analysis process data (204) from the database (200) that are associated with feature data (205) that are similar to the feature data (205) acquired by the feature data acquisition unit (103); and a presentation unit (108) that presents the extracted analysis process data (204) to a user as analysis know-how.

A path modification device according to the present disclosure comprises: a program analysis unit that sequentially reads blocks from a control program and analyzes commands through the blocks; a fillet determination unit that, when two successive motion commands include an arc command, recognizes a reference value with respect to fillet formation in each of the motion commands and determines, based on the reference value, whether a connecting area of ​​the path must be filleted with respect to the motion commands;and a rounding processing unit that determines a rounding parameter based on the reference value with respect to the rounding for the path on which rounding is required, and rounds the path based on the determined rounding parameter, wherein the rounding parameter determined by the rounding processing unit is the same value or increases when the reference value increases.

The application provides a system for analyzing the consistency between the privacy policy and the permission call of an applet, comprising: a privacy policy extraction module for extracting the privacy policy of the privacy page in the applet to be analyzed; a privacy policy automatic analysis module for identifying the privacy policy and extracting the sensitive permission to form a first sensitive permission call set; a program analysis module for constructing a guide page transition graph and a dynamic page transition graph, and combining the two to obtain an overall page transition graph; determining a second sensitive permission call set from the overall transition graph by simulating the call process of a specified page; and a consistency analysis module for performing consistency analysis on the first sensitive permission call set and the second sensitive permission call set to determine whether the applet to be analyzed has risks. The privacy policy analysis of the application is more comprehensive, the entity recognition model is more accurate, and the program analysis depth is combined, so that the permission call detection is more comprehensive and accurate.

The invention provides an automatic reasoning method and system for use specifications of a reusable component of a smart contract, and belongs to the technical field of security analysis of the reusable component of the smart contract. An automatic crawling framework is used for collecting source codes of reusable components of mainstream smart contracts to be analyzed and document information of the reusable components of the mainstream smart contracts to be analyzed. And the crawled information of the reusable component of the smart contract is processed by using the task planning intermediate, and the planning of the reusable component use specification automatic analysis working process is completed according to a two-layer planning principle of'process task-subtask '. And constructing and using an intelligent analysis model oriented to reusable component code semantic understanding to process the code understanding class subtasks. And constructing and using a contract analysis tool set to process the program analysis class subtasks. And constructing and using an auxiliary tool set to process the message conversion type subtasks. And integrating the analysis result of each process task, and outputting a usage specification report of the reusable component of the smart contract, thereby realizing efficient and accurate automatic reasoning of usage specification information of the reusable component of the smart contract.

The invention relates to the technical field of binary program analysis and rewriting, and discloses an immediate operand symbolization judgment method and system for a binary rewriting program, and the method comprises a preprocessing step, a basic evidence analysis step, an intermediate evidence analysis step, an advanced evidence analysis step and a fusion decision-making step. The preprocessing layer is used for carrying out structure analysis and semantic modeling on the binary file and extracting candidate immediate operands and meta-information; performing preliminary weighting on the basic evidence layer based on an explicit rule; the intermediate evidence layer carries out quantitative evaluation through a heuristic mode and a statistical mode; the advanced evidence layer performs high-precision analysis on the immediate data of semantic ambiguity; and the fusion decision-making layer summarizes the evidences of all levels, forms a comprehensive tendency value through weighted calculation, classifies immediate operands, and generates a final symbolization strategy. According to the method, the accuracy and interpretability of symbolization judgment are remarkably improved, the analysis precision and the processing efficiency are both considered, and the method is suitable for binary files in different compilers, platforms and file stripping states.

This invention relates to the field of computer-aided skills training program analysis technology, and more particularly to a method and system for evaluating training programs for maintenance technicians. It includes the following steps: S1: Based on the leap characteristics of trainees' cognitive structures during the formation of maintenance skills, the training program is divided into N consecutive stages with capability qualitative change points as boundaries; S2: At the capability qualitative change boundaries of adjacent consecutive stages, based on the degree of influence of the baseline cognitive unit corresponding to the boundary on subsequent consecutive stages, data variation acting on a single observable parameter is constructed; S3: Based on the matching results of the constraint relationship between the single observable parameter involved in the data variation and the associated unvaried observable parameter, logical conflicts acting on trainees are generated. This invention quantifies cognitive stability through staged training and data variation, and transforms diagnostic strategies into behavioral biases by combining conflict experiments, significantly improving the accuracy of higher-order thinking assessment and attribution reliability in maintenance skills training.