126 results about "Program analysis" patented technology

The invention provides a Web application-based slow denial of service attack path acquisition method and device and a medium. The method comprises the following steps of: constructing a program analysis chart of a target Web application program; extracting all program execution paths from an entry node to an exit node based on the graph; calculating the weight of the path by analyzing the key characteristics of the path, and screening candidate paths of which the weight is higher than a threshold value; and further through path state value evaluation, data flow continuity detection and type compatibility detection, finally determining a target path which may have a slow denial of service attack risk. According to the method, a potential attack path is efficiently identified through a static analysis technology, accurate positioning is provided for Web application security protection, and the risk that a system is attacked is reduced.

The invention discloses an intelligent contract vulnerability detection method and system based on semantic comprehension and program path analysis, and belongs to the technical field of network security. The method comprises the following steps: firstly, analyzing an intelligent contract code by using a large language model, and reasoning to generate a structured security rule for defining a taint source, a taint sink and a purifier; secondly, guiding a taint analysis engine by using a security rule, and tracking on a data flow and a control flow diagram of a program so as to efficiently screen out a high-risk taint path; then, carrying out reachability verification on the high-risk path by adopting a symbolic execution technology; and finally, performing final context review on the verified vulnerability path by using the large language model again to generate a vulnerability report. According to the method, the semantic comprehension ability of the large language model and the preciseness of traditional program analysis are subjected to multi-stage cooperation, so that the detection precision and efficiency of the intelligent contract logic vulnerability can be remarkably improved, the interpretability of a report result is greatly enhanced, and the method has important application value.

The invention discloses an intelligent detection method for network security vulnerabilities, and relates to the technical field of network security vulnerability detection, and the method comprises the following steps: analyzing source codes to construct an abstract syntax tree, a control flow graph and a call graph, identifying sensitive operation points based on a rule base, and screening hotspot functions in combination with code indexes and the call graph; extracting a candidate path from a program entry to a sensitive operation point, encoding to generate a path context snapshot, and scoring through a pre-training model; selecting a high-risk path to execute sparse symbolic execution, simplifying constraints by using variable interval information, and dynamically feeding back and adjusting scores; poC input verification is generated for the path triggering the vulnerability constraint, a report containing the path constraint, the triggering condition and the PoC is output, program analysis and machine learning are combined, the vulnerability detection efficiency and precision are improved, and the method is suitable for code security analysis of scenes such as an embedded system.

In variants, the method can include generating mapping model training data, determining the mapping model, and predicting a program based on a transformer. The method can optionally include evaluating the mapping model, running analyses on the program, and / or utilizing the program and / or generated program analyses. The method functions to convert transformer models into programs that can be characterized and / or analyzed using program analysis techniques.

A route change device according to the present disclosure comprises: a program analysis unit that sequentially reads blocks from a control program and analyzes commands by the blocks; a curve formation determination unit that, when two consecutive movement commands include an arc command, detects a reference value related to curve formation in each of the movement commands, and determines, on the basis of the reference value, whether a connecting portion of the route related to the movement commands needs to be curved; and a curve formation processing unit that determines a curve formation parameter on the basis of the reference value related to the curve for the route in which curve formation is needed, and curves the route on the basis of the determined curve formation parameter, wherein the curve formation parameter determined by the curve processing unit is the same value or increases when the reference value increases.

The invention relates to a program analysis method and device, electronic equipment, a storage medium and a computer program product, and the method comprises the steps that before a target program runs, a sampling buffer area is allocated to the target program, and the sampling buffer area comprises sampling buffer partitions allocated for each instruction in the target program; when any sampling moment is reached in the running process of the target program, instruction counter sampling is carried out, a sampling instruction of this time is determined, and a sampling counter in a target sampling buffer partition corresponding to the sampling instruction of this time is updated through atomic operation; after the operation of the target program is finished, determining the total sampling frequency of each instruction in the target program according to the sampling buffer area; and according to the total sampling frequency of each instruction in the target program, performing performance analysis on the target program to obtain a performance analysis result. According to the embodiment of the invention, the operation of the target program is not influenced under the condition that the sampling precision is ensured, and the performance analysis of the target program is effectively realized.

The invention discloses a dependency visualization method and device and a storage medium, and relates to the technical field of program analysis, and the method comprises the steps: obtaining and analyzing a metadata file, constructing a business element mapping relation based on the association between a code element and a use case as well as extension, then traversing all class files through a class reader, a method calling instruction list is generated based on the method calling information obtained through traversal and the business element mapping relation, and the method calling instruction list comprises a caller, a callee, a calling type and business target information; then, on the basis of the method calling instruction list, the method, the use case and the extension serve as nodes, the calling relation serves as an edge, and a graph data structure is constructed; and outputting the interactive dependency graph based on the graph data structure. According to the method, the technical effect of visually displaying the dependency relationship between the methods can be achieved.

This invention provides a privacy protection method and system for preventing misbehavior in mini-programs based on deep learning. It utilizes the collaborative efforts of deep learning and program analysis techniques to detect inconsistencies between the expected and actual behavior of mini-programs. This invention provides a novel mini-program analysis technique that associates UI information of widgets with corresponding program behaviors and determines the actual behavior of widgets based on program analysis, thereby enabling the construction of large-scale, high-quality training datasets. Based on the results of program analysis, deep learning techniques are used to learn an icon-behavior model from unstructured datasets to infer the expected behavior of widgets. This invention uses a defined three-layer standard model to detect differences between actual and expected behavior by calculating outlier scores. If any inconsistency is found, it indicates the presence of a misbehaving mini-program. The risk level of the inappropriate behavior can then be estimated, and countermeasures can be proactively implemented.

The invention relates to the technical field of computers, in particular to a metamorphic relation identification method based on program dependency graph features. The method comprises the following steps: obtaining a control flow graph (CFG) of a target program, and obtaining a control dependency graph according to the control flow graph and a forward dominating tree; obtaining a program dependency graph according to the control dependency graph and the data dependency relationship; according to a program analysis requirement slicing criterion C = (N, V) of a target program, graph traversal is conducted on the program dependency graph, program slicing features are obtained, N represents instructions in the target program, and V represents a variable set; and inputting the program slice features into a target prediction model for identification, and obtaining a prediction result corresponding to the metamorphic relationship of the target program. By the adoption of the method and device, the metamorphic relation obtaining accuracy can be improved, the situation that the metamorphic relation cannot be obtained is reduced, program testing convenience can be improved, and software quality is improved.

The invention relates to the technical field of numerical control programming, and provides a numerical control program analysis method and device. The method comprises the following steps: mapping a first numerical control program into a second numerical control program according to instruction conversion information; simulating the second numerical control program to obtain an original simulated processing track; performing parameter-level optimization and / or interaction-level optimization on the original simulation processing track to obtain an optimized simulation processing track, and visualizing the original simulation processing track and the optimized simulation processing track; wherein the instruction conversion information represents a corresponding relation between the first numerical control program and the second numerical control program; the parameter level optimization comprises at least one of arc-to-small line segment conversion, fine smoothing, coarse smoothing and local point processing; interaction level optimization includes at least one of zoom, rotation, and translation. According to the numerical control program analysis method and device provided by the invention, the numerical control program programming and simulation efficiency and accuracy can be improved.

The application relates to the technical field of binary program analysis and rewriting, and discloses an immediate number symbolization judgment method and system of a binary rewriting program, which comprises a preprocessing step, a basic evidence analysis step, an intermediate evidence analysis step, a high-level evidence analysis step and a fusion decision step. The preprocessing layer carries out structural analysis and semantic modeling on a binary file, extracts candidate immediate numbers and meta information, the basic evidence layer carries out preliminary weighting based on explicit rules, the intermediate evidence layer carries out quantitative evaluation through heuristics and statistical patterns, the high-level evidence layer carries out high-precision analysis on the immediate numbers with semantic ambiguity, the fusion decision layer summarizes the evidences at all levels, forms a comprehensive tendency value through weighted calculation, classifies the immediate numbers, and generates a final symbolization strategy. The application significantly improves the accuracy and interpretability of symbolization judgment, balances the analysis precision and processing efficiency, and is suitable for binary files of different compilers, platforms and file stripping states.

Numerical control device capable of providing an interface that performs safe task control for adding an original function, wherein the numerical control device comprises: - a memory management unit that is set up to develop or initialize a program executed by a task in memory, analyze the program, and gather information about the program, - an execution time calculation unit that is set up to calculate an execution time of the task, - an execution condition setting unit configured to set an execution condition of the task based on the execution results of the memory management unit and the execution time calculation unit, - a task monitoring unit that is configured to monitor the state of a computing unit and to determine the computing unit to which the task is assigned, and - a task control unit that is configured to register and start the task in the assigned computing unit based on the execution condition.

This disclosure provides a program analysis method, apparatus, and electronic device, relating to the field of computer technology, and particularly to the field of computer software technology. The specific implementation scheme is as follows: Obtaining the abstract syntax tree (AST) corresponding to the program file to be analyzed; searching the AST based on the preset feature codes to determine a first code file containing the preset feature codes, wherein the preset feature codes identify the execution process of the program file to be analyzed; counting the number of preset feature codes contained in the first code file and the number of sub-preset feature codes of the preset feature codes to obtain a first statistical result, wherein the sub-preset feature codes are sub-codes containing the preset feature codes; displaying the first statistical result. This demonstrates the reliability of the program file to be analyzed, enabling developers to more accurately determine whether the program file to be analyzed is reliable.

This control device disclosed herein comprises a program analysis unit that sequentially reads instruction blocks from a control program for controlling the control axes of an industrial machine and analyzes the read instruction blocks; an interpolation unit that, based on the analysis result, generates an interpolation pulse for each interpolation period for controlling the control axis; a block start determination unit that, based on start remote data defining a start time of a movement by the next instruction block during a movement based on a predetermined instruction block, determines the start of the execution of the instruction blocks; and several acceleration / deceleration control units to accelerate / decelerate each of the axes in response to the interpolation pulse and to generate a velocity pulse.an acceleration / deceleration control selection unit that selects the acceleration / deceleration control unit for each of the command blocks based on at least one of an overlap extent, a processing process, a command type, a type of acceleration / deceleration, and a command velocity; and a velocity pulse summing unit that summates the velocity pulses generated by the multiple acceleration / deceleration control units for each of the control axes.

The application belongs to the technical field of automatic software testing and program analysis, and relates to a precise testing service system based on software code analysis reasoning, which comprises a data acquisition and initial graph construction module, an initial context-aware probability execution graph being constructed in combination with static potential call edges; a syntax change semantic analysis module, a structured syntax disturbance signature being generated; a probability disturbance instruction generation module, conditional probability disturbance instructions and polymorphic distribution disturbance instructions being generated, and a probability disturbance instruction set being aggregated; a graph real-time reconstruction module, a reconstructed probability execution graph being generated; an influence domain propagation analysis module, affected nodes being determined and an affected function set being generated; and a regression test subset generation module, a minimized regression test subset being generated. The application solves the problem that, when a traditional regression test selection method faces context-related program behaviors, the actual runtime influence probability of changes cannot be quantified, resulting in inaccurate test range selection.

A control device according to the present disclosure comprises: a program analysis unit that sequentially reads and analyzes commands related to a block of a control program for additive manufacturing processing; a control unit that controls the operation of an industrial machine that performs the additive manufacturing processing on the basis of an analysis result by the program analysis unit; an execution state grasping unit that grasps information related to an execution state including at least an interrupted position when the additive manufacturing processing is interrupted; and an adjustment unit that calculates the retrograde amount from the interrupted position and adjusts a processing restart position on the basis of the retrograde amount. The control unit resumes the additive manufacturing processing from the processing restart position after the adjustment by the adjustment unit.

The application discloses a function equivalent function pair extraction method and device based on a large model, and aims to solve the technical problem of low extraction efficiency of function equivalent function pairs caused by the existing function equivalent function pair extraction method. The method comprises the following steps: acquiring multiple programming language versions and corresponding document code data, and determining multiple programming language function equivalent versions; performing program analysis on a to-be-tested programming language project, and determining multiple test cases; screening each test case, determining multiple target test cases, and respectively analyzing each target test case to determine the target function corresponding to each target test case and multiple external functions; determining multiple candidate function pairs according to the target function corresponding to each target test case and the multiple external functions; outputting multiple initial function equivalent function pairs from a preset large model according to the multiple candidate function pairs; and performing function pair function confirmation on each initial function equivalent function pair to determine multiple target function equivalent function pairs.

A method for blocking external debugger application from analysing code of software program installed on computing device. The method including initializing software program including an application program and an internal debugger application. The software program, upon initialization thereof, instructs internal debugger application to load application program in internal debugger application. The internal debugger application is configured to utilize kernel resources of an operating system of the computing device. The method includes executing internal debugger application to set one or more break-points in code of application program to define execution path for code of application program, executing application program as per defined execution path for code thereof, stopping execution of code of application program upon reaching any of one or more break-points therein, and handing control to internal debugger application to provide an address for next instruction to be executed in defined execution path for code of application program.

The invention discloses a Rust program slicing method and system based on a high-order function, and relates to the technical field of functional programming and program analysis. The method comprises the steps of program preprocessing; analyzing in the process; inter-process analysis and program slice calculation. According to the method, slice information in the process is obtained by utilizing high-order function characteristics, and the function abstract expressed in the high-order function form is generated, so that function parameters in the function abstract can be conveniently substituted at a calling point as required during inter-process calling, and a corresponding relation between the function parameters and actual parameters can be quickly obtained; compared with a traditional abstract-based analysis method, more information can be carried in the parameter transmission process, so that the inter-process slicing efficiency can be effectively improved, various hypergraphs do not need to be constructed, the problem of low analysis efficiency caused by huge graphs and complex composition process is avoided, and the analysis efficiency is improved. Therefore, the space overhead in the analysis process can be effectively reduced, and the inter-process program slicing efficiency is improved on the premise that the detection precision is not lost.

A system (100) or method (500) for preventing or mitigating malicious processes in a computing environment having one or more processors (204) and memory (202) operatively coupled to the one or more processors can include computer instructions which when executed causes the one or more processors to perform certain operations. The operations can include intercepting (502) all file system input and output paths using a kernel driver (103), analyzing (504) for suspect behaviors in real time on data being processed through the input and output paths and data access patterns on a live system implemented in a kernel of an operating system for the computing environment, flagging (512) the data for any suspect behaviors, and preventing (514) further processing upon detection of the suspect behaviors.

The invention relates to a method and a system for automatically generating a SysML v2 visual analysis model of system engineering, belongs to the technical field of program analysis, and solves the problem that a traditional system engineering document cannot be effectively and automatically modeled in the prior art. The method comprises the following steps: converting an input initial system engineering design document into a document structured representation model; extracting related document contents from the document structured representation model according to user modeling requirements, extracting related knowledge entries from a pre-configured domain knowledge base, and extracting related case entries from a pre-configured modeling case library; and inputting the extracted document content, knowledge entries and case entries as context information into a large language model, and generating a SysML v2 visual analysis model of the system engineering by using the large language model according to the modeling requirement of a user. Based on the document structured representation model, the field knowledge base and the modeling case base, automatic analysis and modeling of the system engineering document are achieved.

The application discloses a malware escape behavior detection method based on high-order functions and dependent algebra, and relates to the technical field of functional programming and program analysis.The application comprises receiving source code of failed escape malware, and analyzing the dependent relationship among functions in the source code based on dependent algebra theory, and constructing a relevant set, wherein the dependent relationship comprises data dependency, control dependency and parameter dependency; a function abstract is constructed by using a high-order function to form a formal representation of the dependent relationship.The application can accurately analyze the function call relationship, data flow and control flow in the malware code by constructing a high-order function dependent matrix and a function abstract, compared with the traditional static analysis method, the application can quickly extract the key path of the malware, especially in the case of complex function call and dependent relationship, the application can effectively identify the most critical malicious behavior path, significantly improves the analysis efficiency and accuracy, and thus enhances the detection capability of the related detector.

The invention discloses a program analysis method and device, equipment and a medium. The method comprises the steps of obtaining an abstract syntax tree corresponding to a to-be-analyzed program; creating a value number table and a signature number mapping table; traversing the abstract syntax tree, aiming at each data shape related expression node, determining a current stack frame where a value number table and a signature number mapping table are located according to the node type, generating an expression signature, generating a value number mapped with the expression signature, and storing the value number into a current effective domain of the value number table, and correspondingly storing the expression signature and the value number mapped by the expression signature into the current effective domain of the signature number mapping table. According to the embodiment of the invention, the data shape expression generated and quoted in the source code of the program can be automatically analyzed based on the abstract syntax tree, the expression signature and the value number are obtained, the signature is stored through the value number table, and the mapping relation between the signature and the value number is stored through the signature number mapping table.

The present disclosure relates to a program analysis method and device, electronic equipment, storage medium and computer program product, the method comprising: allocating a sampling buffer for a target program before the target program runs, the sampling buffer comprising a sampling buffer partition allocated for each instruction in the target program; when reaching any sampling moment during the running of the target program, performing instruction counter sampling, determining the sampling instruction, and updating the sampling counter in the target sampling buffer partition corresponding to the sampling instruction through atomic operation; after the running of the target program ends, determining the total sampling number of each instruction in the target program according to the sampling buffer; and performing performance analysis on the target program according to the total sampling number of each instruction in the target program to obtain a performance analysis result. According to the embodiments of the present disclosure, the performance analysis on the target program can be effectively implemented without affecting the running of the target program under the condition of ensuring sampling accuracy.

A program analysis apparatus includes a first code block extraction means for extracting a first code block having a specific property from codes included in a binary of a program, a second code block extraction means for extracting a second code block performing a predetermined sensitive operation from the codes included in the binary of the program, a relationship information acquisition means for acquiring relationship information indicating a relationship on a control flow between the first code block and the second code block, a backdoor score calculation means for calculating a backdoor score based on content of the predetermined sensitive operation in the first code block and performing addition and subtraction of the backdoor score with respect to the first code block based on the relationship information, and an output means for outputting the first code block and the backdoor score for the first code block.

This control device disclosed herein comprises: a program analysis unit that sequentially reads command blocks from a control program for controlling control shafts of an industrial machine and analyzes the read command blocks; an interpolation unit that generates an interpolation pulse for each interpolation period for controlling the control shafts on the basis of the analysis result; a block start determination unit that determines the start of execution of the command blocks on the basis of start distance data that defines the start timing of a movement by the next command block during a movement based on a predetermined command block; a plurality of acceleration / deceleration control units for performing acceleration / deceleration of each of the shafts in response to the interpolation pulse to generate a speed pulse; an acceleration / deceleration control selection unit that selects the acceleration / deceleration control unit for each of the command blocks on the basis of at least one of overlap amount, machining process, command type, acceleration / deceleration type, and command speed; and a speed pulse summing unit that sums up the speed pulses, generated by the plurality of acceleration / deceleration control units, for each of the control shafts.

The embodiment of the application relates to the computer technical field, in particular to an application program analysis method and device, equipment and storage medium, aiming at improving the efficiency of program performance analysis, the method comprises the following steps: in response to a data collection instruction for a target application program, binding a collection trigger function with a data collection signal, the data collection instruction at least comprising a process name corresponding to the target application program, collection parameters corresponding to the target application program, and target result parameters corresponding to the target application program; determining a target process number corresponding to the target application program according to the process name; issuing a data collection signal to a data collection program according to the collection parameters and the target process number, so as to trigger a data collection task of a target process corresponding to the target process number, obtain collection data, and the collection data represents the number of samples of each function in the target process; and performing statistical analysis on the collection data according to the target result parameters to obtain a statistical result file.