61 results about "Program Dependence Graph" patented technology

The invention provides a storage type XSS attack detection method and device based on a large language model, and the method comprises the steps: receiving an initial cue word, inputting the initial cue word into a cue word expander, carrying out the extension of the initial cue word, carrying out the performance evaluation to screen out a cue word meeting a preset performance index, carrying out the multi-round extension and evaluation, and obtaining a detection result. Until the optimized cue word is obtained; the method comprises the following steps: receiving a to-be-detected code, generating a program dependency graph of the to-be-detected code, decomposing the program dependency graph of the to-be-detected code into a plurality of sub-graphs with consistent program structures to obtain a plurality of sub-program dependency graphs, traversing nodes in each sub-program dependency graph, and reserving an original structure of a program; the nodes are sequentially converted into an original code format to obtain code representation fragments, the code representation fragments and the optimized cue words are input into a large language model to judge whether each code fragment is an attack vector of a storage type XSS or not, and a final speculation result is obtained. The method has the advantages of low detection cost, high accuracy and high efficiency.

The invention provides a code quality adaptive evaluation and optimization method, system and device and a medium, and belongs to the technical field of computers. The method comprises the following steps: performing redundant information cleaning and standardization processing on an original code; selecting an adaptive parser to convert the processed code into an abstract syntax tree, and optimizing the abstract syntax tree; performing embedding processing on each node of the abstract syntax tree by using a pre-trained deep learning model to generate a node semantic vector, and performing aggregation, feature extraction and vector normalization operation to obtain a semantic vector representing code semantic features; extracting a dependency relationship from the abstract syntax tree to construct a program dependency graph, extracting node features by using a neural network model, and generating a dependency relationship analysis result; based on the semantic vector and the dependency analysis result, identifying a code potential problem by using an optimization algorithm and generating an optimization suggestion; codes are automatically modified according to optimization suggestions, the optimization effect is re-evaluated, and related models and algorithms are iteratively optimized according to feedback information.

The invention discloses a test generation and defect prediction method and system based on a heterogeneous program diagram, and the method comprises the steps: constructing a heterogeneous dynamic program dependency diagram: extracting an abstract syntax tree, a control flow diagram and a program dependency diagram of a source code through static analysis, capturing an execution track during operation in combination with dynamic instrumentation, and integrating version evolution information, forming a heterogeneous dynamic program dependency graph containing various types of nodes and edges; heterogeneous graph neural network modeling: designing a four-layer eight-header heterogeneous graph neural network model based on the heterogeneous dynamic program dependency graph, and outputting a function level defect probability and a test case sequence by adopting a type awareness attention mechanism and time coding injection; and multi-task joint training and reasoning: adopting an end-to-end training strategy, jointly optimizing defect prediction loss and test generation loss, preferentially screening high-risk functions during reasoning, and generating a coverage test case. According to the method, the defect detection accuracy is remarkably improved, the test coverage rate is increased, and the method is suitable for enterprise-level complex software systems.

The invention relates to a source code vulnerability slice-level detection and statement-level positioning method based on multi-task learning, and belongs to the technical field of source code detection. The invention provides a new source code vulnerability detection method based on deep learning. According to the method, the program slice sub-graph related to the vulnerability candidate elements is extracted from the whole source code based on the accessibility of the program dependency graph, and vulnerability detection is carried out by taking the slice sub-graph as granularity, so that vulnerability features can be better captured, and the detection accuracy is improved.

The invention discloses a method for automatically capturing semantic information of a binary code block and a related device, and relates to the technical field of computers.The method comprises the following steps that code disassembling and instruction level analysis are conducted on the binary code block, and a binary stream original instruction sequence is generated; performing semantic intermediate representation conversion and vocabulary overflow standardization on the binary stream original instruction sequence to obtain a binary code standardized instruction sequence; obtaining an instruction data dependency relationship and an instruction control dependency relationship corresponding to the binary code block, and constructing a corresponding binary code program dependency graph; semantic code node embedding is carried out on the binary code program dependency graph to generate a binary code representation vector corresponding to context semantics; and performing automatic semantic capture reasoning on the binary code representation vector corresponding to the context semantics through a pre-trained semantic understanding model to obtain semantic information of the binary code block. According to the method, the semantic information of the binary code block can be efficiently and accurately captured.

The invention discloses a PLC variable association relationship analysis method and device based on weight calculation and electronic equipment. The method comprises the following steps: constructing a program dependency graph representing a PLC variable dependency relationship; according to the program dependency graph, quantifying association strength between PLC variables, and calculating to obtain a dependency edge weight; according to the dependency edge weight, calculating an association relationship score between the PLC variables, and identifying to obtain the association relationship score between the PLC variables; and determining potential attack point risk information of the industrial control system according to the identified association score, and guiding a defense system to discover an intrusion point or a fault source. According to the embodiment of the invention, the strong association relationship before the variable can be comprehensively and reliably identified; in addition, direct dependence between variables can be accurately recognized, indirect influence relations are captured, and the method can be widely applied to the technical field of computers.

The invention discloses a configuration item error determination method and a related device. The method comprises the following steps: acquiring a source code comprising a plurality of configuration items and configuration item reading points respectively corresponding to the plurality of configuration items; a program dependency graph for characterizing relationships between program statements is constructed for the source code. According to the configuration item reading points corresponding to all the configuration items, slicing operation is conducted on the program dependency graph, and program statements associated with all the configuration items are determined. And for a first configuration item and a second configuration item in the plurality of configuration items, determining an overlapped statement between the program statement associated with the first configuration item and the program statement associated with the second configuration item. And determining an association grammar rule between the first configuration item and the second configuration item according to the overlapping statement. Therefore, the association grammar rule is determined according to the overlapping statement before the configuration item, so that the association error of the configuration item can be conveniently determined according to the association grammar rule, the dimension of the configuration item grammar rule is expanded, and the comprehensiveness of determining the error of the configuration item is improved.

The invention discloses a contract vulnerability detection method and system based on cross-granularity feature fusion and meta-learning, and relates to the technical field of block chain security, the method comprises the following steps: obtaining a source code and a compiled byte code of a contract to be detected; source code semantic features are extracted from the source code, operation code execution features are extracted from the byte code, and graph structure features are extracted after a program dependency graph is constructed from the source code; performing cross-granularity attention interaction to generate cross-granularity fusion features; performing type-aware feature modulation on the cross-granularity fusion feature and a vulnerability type identifier of the current detection task, training a classifier by adopting a meta-learning strategy, and outputting a vulnerability detection result; and in response to the vulnerability detection result that the vulnerability exists, positioning the vulnerability code position based on the graph-source code attention weight matrix generated in the cross-granularity attention interaction process, thereby solving the problem of poor generalization ability in a rare vulnerability scene with scarce samples.

The invention relates to the field of code vulnerability detection, in particular to a binary vulnerability retrieval and positioning method and system based on high-dimensional vulnerability characterization, and the method comprises the steps: firstly inputting a binary file, analyzing the structural information of the binary file, and analyzing a machine instruction; extracting binary file function information, generating a cross-platform basic block IR instruction sequence, constructing a control flow graph, and constructing a data dependency graph; splicing the program dependency graph feature vector and the basic block IR instruction sequence feature vector, and performing multi-modal feature fusion to generate a comprehensive high-dimensional vulnerability representation vector; and finally, inputting the high-dimensional vulnerability representation vector into an index for searching to obtain a plurality of nearest neighbor indexes and distances, converting the distances into similarity, filtering according to a similarity threshold to obtain a most similar vulnerability vector, and obtaining vulnerability information and vulnerability positions corresponding to the vulnerability vector. The problems that traditional binary vulnerability detection cross-platform and compiler optimization detection fails and the result reliability is low are solved.

The invention discloses a method and a system for generating a test case for covering a loop boundary based on program slices. The method comprises the following steps of: inputting a source code to be tested and a target loop line number; the method comprises the following steps: analyzing a to-be-tested source code based on an abstract syntax tree technology, and extracting key node information to construct a program dependency graph; collecting related code lines through graph traversal by taking a loop structure needing to be analyzed as a criterion, and generating a minimum executable loop slice; performing symbolic execution on the minimum executable loop slice, simulating a loop execution process, capturing condition judgment nodes, and forming a track dictionary; determining a strategy based on the trajectory dictionary and the variable state, and when the strategy is numerical search, performing parameter space exploration; when the strategy is symbolic analysis, analyzing the cyclic condition expression and solving the optimal parameter; generating candidate test cases based on the analysis result; executing the candidate test case, calculating the number of loop iterations, and determining whether an expected state is reached; and if the expected state is reached, outputting a final test case.

The application provides a PLC information security analysis model construction method based on variable association, which comprises the following steps: analyzing PLC code to obtain PLC variables, combining variable pairs according to network blocks, splicing variable pairs in a global range to obtain global variable dependency relations, constructing a weighted PLC program dependency graph according to the global variable dependency relations and SCADA log features, cleaning the relationship edges of the weighted PLC program dependency graph, and enhancing the dependency strength of the dependency edges of the cleaned weighted PLC program dependency graph to generate a PLC information security analysis model. The method can simultaneously act on two levels of structure optimization and weight optimization, and realize stable reconstruction of PLC dependency relations. Not only can the method effectively remove redundant dependency edges, but also can maintain the stability of key dependency relations under the conditions of data drift and noise interference, and significantly improve the accuracy and robustness of the PLC information security analysis model.

The invention discloses a static analysis tool test case generation method based on a program slicing technology, which comprises the following steps: step 1) according to a defect report of a static analysis tool, collecting and extracting variable information related to generation of a specific defect in a program as a slicing criterion; 2) through control flow analysis and data flow analysis, recording data and a control dependency relationship between statements, constructing a program dependency graph, and calculating a statement set having a dependency relationship with a slicing criterion; 3) positioning nodes corresponding to the statement set in the abstract syntax tree of the source code through a depth-first search algorithm, and deleting other nodes; the method comprises the following steps of (1) collecting a user-defined type or an external function declaration which is used through static program analysis, and outputting the type definition and the function declaration to an independent header file, and (5) writing edited codes into a file, and clearing redundant information to serve as a test case, the method adopts two-section analysis, and the test case can be generated efficiently and precisely.

The invention belongs to the technical field of power system security protection, and discloses a binary program vulnerability detection method and related device.The binary program vulnerability detection method comprises the steps that a VEX instruction of a to-be-detected binary program is obtained, and a program dependency graph is generated according to the VEX instruction; disassembling the to-be-detected binary program to obtain an assembly instruction, traversing the program dependency graph based on a preset sensitive operation instruction, and performing operand granularity slicing of the assembly instruction to obtain assembly instruction slices; a pre-trained encoder model is adopted to obtain feature vectors of the assembly instruction slices; and according to the feature vector of the assembly instruction slice, based on a pre-trained vulnerability detection model, obtaining a vulnerability detection result of the assembly instruction slice. According to the method, accurate dependency analysis is carried out around operands, a large number of irrelevant instruction interferences in binary program codes are effectively filtered out, most sensitive operations generating vulnerabilities can be covered based on preset sensitive operation instructions, the noise influence of redundant information on a model is reduced, and the robustness and generalization ability of detection are improved.

This invention relates to the field of smart contract security and discloses a smart contract vulnerability detection method based on self-supervised learning. The aim is to obtain effective structured representations of smart contract vulnerabilities at the bytecode level, and to improve the robustness of smart contract vulnerability detection by learning key features related to vulnerabilities through self-supervised learning. The method includes: collecting smart contract bytecode; constructing a smart contract opcode program dependency graph; extracting vulnerability-related program dependency graph slices to construct a self-supervised learning dataset and a vulnerability detection model training dataset; training a self-supervised learning model using the self-supervised learning dataset and extracting program dependency graph slice features; training a smart contract vulnerability detection model using the vulnerability detection model dataset; and using the trained self-supervised learning model to extract vulnerability-related features of the smart contract under test, and inputting these features into the trained smart contract vulnerability detection model for vulnerability detection.

The invention provides a source code vulnerability detection method and device based on a graph neural network and multi-branch feature fusion and a medium, and the method comprises the steps: carrying out the static analysis of an input source code, and constructing a program dependency graph; coding the text information of the nodes in the program dependency graph based on a pre-training language model to generate a semantic embedding representation of structure perception; in combination with centrality index analysis, converting the program dependency graph, and constructing a converted three-channel image; constructing a feature extraction network, and performing feature extraction on the program dependency graph, the text information and the three-channel image through the feature extraction network to obtain graph features, text features and image features; and fusing the graph features, the text features and the image features through an adaptive feature fusion module, and inputting the fused features into a full-connection layer classifier to complete vulnerability classification. According to the method, potential problems in source codes can be comprehensively understood and analyzed, and the accuracy of vulnerability detection is remarkably improved.

The invention relates to the technical field of computers, in particular to a metamorphic relation identification method based on program dependency graph features. The method comprises the following steps: obtaining a control flow graph (CFG) of a target program, and obtaining a control dependency graph according to the control flow graph and a forward dominating tree; obtaining a program dependency graph according to the control dependency graph and the data dependency relationship; according to a program analysis requirement slicing criterion C = (N, V) of a target program, graph traversal is conducted on the program dependency graph, program slicing features are obtained, N represents instructions in the target program, and V represents a variable set; and inputting the program slice features into a target prediction model for identification, and obtaining a prediction result corresponding to the metamorphic relationship of the target program. By the adoption of the method and device, the metamorphic relation obtaining accuracy can be improved, the situation that the metamorphic relation cannot be obtained is reduced, program testing convenience can be improved, and software quality is improved.

The invention discloses a source code program dependency graph pruning optimization method for vulnerability detection, which comprises the following steps of: 1, recording a source code data set as a data set A, performing attribute screening on the data set A, and recording the filtered data set as a data set B; 2, preprocessing the data set B to form a sample I; step 3, converting the sample 1 into a program dependency graph representation to form a sample 2; step 4, pruning in the sample 2 based on a pointer node, an array node, a sensitive API calling node and an integer overflow expression node, and generating a program dependency sub-graph marked as a sample 3; step 5, carrying out vectorization training on the code semantic unit in the sample 3, and recording as a sample 4; and step 6, training and predicting the fourth sample by using the graph neural network to obtain a vulnerability detection result of the source code. The problems of high calculation overhead and insufficient detection precision when a traditional method is used for processing large-scale code files are solved.

The application discloses a cross-file calling vulnerability mining method based on deep learning, and the method comprises the following steps: 1) converting the source code of a current file to be detected into a program dependency graph; 2) traversing the graph nodes on the basis of the program dependency graph, observing the function calling relationship through the graph node information, and fusing the graph features of the current file and the called file into PDGcross features; 3) processing the PDGcross features into a feature matrix, labeling each matrix with a vulnerability label, and generating training samples; and 4) training a classification model on a dataset containing labels by using a neural network, and performing vulnerability detection and vulnerability category prediction. The method has excellent recognition rate and accuracy in detecting unknown vulnerabilities and in detecting multi-file calling vulnerabilities.

This disclosure provides an automatic translation method, apparatus, device, and medium for deep learning code. The method includes: acquiring source code written on a deep learning framework based on a first heterogeneous computing hardware; parsing the source code to extract its lexical sequence and program dependency graph; inputting the lexical sequence and program dependency graph into a graph-aware cross-attention Transformer model to generate a set of candidate target code that satisfies constraints of lexical consistency, structural consistency, and behavioral consistency; performing API-level replacement and reconstruction on the set of candidates through operator alignment mapping and symbol synthesis search; performing multi-dimensional consistency verification on the reconstructed candidate code; and outputting the verified target code. According to embodiments of this disclosure, the migration of deep learning code between different heterogeneous computing hardware eliminates the need for manual reconstruction and debugging, significantly shortening the adaptation cycle and reducing human resource investment and professional knowledge threshold.

The present invention proposes a vulnerability detection method based on a dual attention mechanism and code similarity, which belongs to the field of vulnerability detection technology. It includes: extracting the program dependency graph corresponding to the unknown function to be tested, expanding the abstract syntax tree corresponding to the statement to each node of the program dependency graph to form a composite graph; using the marked vulnerability statement as a slicing criterion, finding the slicing node in the program dependency graph as the root node, expanding the abstract syntax tree to form a slice composite graph; learning the syntax and semantic information within the statement, generating an initial embedding vector of the statement node composed of semantic and syntax feature vectors; learning the structural features of the source code, obtaining the slice composite graph and the vector representation of the composite graph, and calculating the similarity between the two; when the similarity exceeds a certain threshold, the target function is defined as a potential vulnerability function. This method solves the problem of vulnerability detection methods that lack vulnerability information that can effectively exploit known vulnerability codes while ignoring or even eliminating redundant irrelevant information in the code.

The invention provides an intelligent contract vulnerability detection method and device, electronic equipment and a storage medium, and can be applied to the technical field of block chains. The method comprises the following steps: based on code data of a to-be-detected smart contract, obtaining a program dependency graph of the code data; inputting the program dependency graph into a pre-constructed feature extraction model, and obtaining fusion features output by the feature extraction model; inputting the fusion feature into a pre-constructed classifier model, and obtaining a contract vulnerability tag output by the classifier model; wherein the contract vulnerability tag is used for identifying the vulnerability code in the code data. According to the method, the structural features and the semantic features of the to-be-detected smart contract are fused in the detection process, so that the accuracy and the reliability of vulnerability detection are improved.

The invention relates to a hook function-based static memory vulnerability mining method, which comprises the following steps of S1, performing operations such as lexical analysis and the like on a source code through a Clang compiler LLVM, S2, using the LLVM as a generator of a back-end code, and generating an IR, S3, generating a control flow graph CFG and a program dependency graph PDG based on the IR, S4, generating a code attribute graph CPG based on AST, CFG and PDG, and S5, selecting OverflowDB or Neo4J for a graph database, the method comprises the steps of S1, analyzing code features of a hook function, S6, searching for a proper DSL attribute relation according to the analyzed code features to operate a graph database, S7, using Function Access to develop a queried Checker according to the code features of the hook function, S8, finding a static scanning tool supporting a stain scanning model, S9, generating a configuration format matched with a current tool, and S9, executing the step S9. And S10, starting mining according to the hook configuration, the stain model of the static tool and the stain Checker supported by the stain. The problems of high false alarm and low income of current memory problems are solved, and the system integrity risk is reduced and the system robustness is enhanced through deep mining.

The invention discloses a static taint analysis white-box testing method, device and equipment based on mutual information entropy, and relates to the technical field of test.The method comprises the steps that a taint source and a taint sink are determined, and a program flow chart is constructed; checking the state of the stain sink based on a program dependency graph in the program flow chart, and filtering and optimizing the path of the program to obtain a path simplification graph of the program; performing static taint analysis on the path simplification diagram, performing taint marking on variables with a data dependency relationship according to a taint propagation rule, and calculating a polluted probability of statement variables with a control dependency relationship in combination with a mutual information formula in a quantitative information flow technology so as to realize taint marking; and traversing each dependency set containing the stain mark nodes along the path simplification graph, and generating a stain propagation path graph. According to the method, the taint marking problem under the control dependency relationship can be effectively solved, and the vulnerability injection attack resisting capability and reliability of a program are improved.

The invention discloses an interrupt-driven software static defect detection system and method, and the system comprises a detection system which comprises a program abstraction module, a program analysis module, an interrupt concurrency analysis module and a detection interface module. The program abstraction module is used for preprocessing and compiling a to-be-processed program to obtain an abstract program represented by an intermediate code for subsequent analysis; the program analysis module is used for further analyzing the program represented by the intermediate code to obtain a function call graph, a program dependency graph and a preliminary analysis result; the interrupt concurrency analysis module is used for further analyzing the program to obtain a final accurate analysis result; according to the method, abstract representation, program analysis and interrupt abstract construction are carried out on a program, and static detection is carried out on defects in interrupt-driven software in an accurate, efficient and extensible manner through issuing analysis and path feasibility analysis.

The invention provides an incremental test context generation method and system based on a minimum patch graph. The method comprises the following steps: constructing a cross-file program dependency graph containing control, data and call dependencies at the same time; performing semantic slicing by taking the modified row set as a seed; an improved Tarjan-Lengauer algorithm containing read-only dependency pruning and parallel path compression is adopted to solve a minimum dominating set; generating a minimum patch graph [delta]-Context, and carrying out serialization by using a customized DSL (Digital Subscriber Line); and then only the delta-Context related file is compiled, and the influenced test case set is executed. According to the method, a cross-file program dependency graph + semantic slicing + improved Tarjan-Lengauer minimum dominating set technology is adopted, and the problems of large patch redundancy, wide test range, high false alarm rate and the like of traditional row-level diff in incremental compiling and regression testing are solved.

The invention provides a binary program analysis, storage and query method and system. The method comprises the following steps: performing multi-level program semantic analysis on an input binary program file; on the basis of a node and edge attribute mapping rule of the graph database, storing path nodes and associated edges to Neo4j, and then establishing an address hash index; and finally, performing program vulnerability query based on a hybrid query engine, and returning all unverified calling points and upstream data flow paths thereof. According to the method, the whole-process coverage from program analysis to intelligent query is realized by constructing a structured program dependency graph and combining a multi-modal analysis engine and graph database storage optimization; control flow, data flow and symbol constraints can be captured at the same time, and cross-function vulnerability analysis can be carried out; according to the method, the query delay is reduced by 50% by utilizing the associated storage mode of the graph database; complex semantic query can be achieved through the mixed query engine, symbolic execution verification is conducted on the query path, and feasibility of the query path is ensured.

The present invention discloses a programming education intelligent management method and system based on neural network, the method comprising: extracting first semantic information of student source code text based on a first neural network; extracting second semantic information of the abstract syntax tree of the student source code based on a second neural network; extracting third semantic information of the variable program dependency graph of the student source code based on a third neural network; fusing the first semantic information, the second semantic information, and the third semantic information using a multimodal feature fusion model based on Transformer to obtain fused semantic features; inputting the fused semantic features into an output layer to obtain a student source code quality analysis result. The present invention utilizes multiple data types of source code to fully extract the semantic information of the source code, thereby more comprehensively capturing the semantic information of the source code.

The invention relates to the technical field of information security, in particular to a vulnerability detection method and device based on a graph neural network and electronic device.The vulnerability detection method based on the graph neural network comprises the steps that program source codes are analyzed to obtain a program dependency graph, node embedding is conducted on the program dependency graph, and the program dependency graph is obtained; obtaining a node feature vector; inputting the node feature vectors into a trained gating graph neural network model, wherein the gating graph neural network model enhances node feature representation; and classifying the node feature vectors by using convolution pooling and a multi-layer perceptron, and predicting whether the program source code has vulnerabilities or not. The software vulnerability detection method and device can effectively improve the accuracy and efficiency of software vulnerability detection.

The application provides a vulnerability detection method based on a hierarchical centrality fusion strategy and a double-channel convolutional neural network, and belongs to the technical field of source code vulnerability detection. The method comprises the following steps: 1, denoising and normalizing the source code function for preprocessing, to generate a standardized code text; 2, parsing the standardized code text into a program dependency graph, and weighting and integrating the code semantic features and the centrality structure features of the graph nodes; 3, based on the hierarchical centrality fusion strategy, the integrated feature matrix is hierarchically mapped according to the local, propagation and global topological properties, to generate a multi-view RGB image representation; and 4, a double-channel convolutional neural network is constructed, deep features of the multi-view RGB image are extracted in parallel, and the vulnerability classification detection is completed based on the fused enhanced features.

The application discloses a vulnerability mining method and device based on multi-task learning, and the method comprises the following steps: based on the abstract syntax tree, the control flow graph and the program dependency graph of the source code, a code attribute graph is constructed; the tree structure and the graph structure in the code attribute graph are separated; the nodes in the tree structure are encoded to obtain the initial node vector representation of the abstract syntax tree; the initial node vector representation of the abstract syntax tree, the tree structure and the graph structure are respectively input into a vulnerability recognition neural network model and a vulnerability positioning neural network model to obtain a vulnerability recognition result and a vulnerability positioning result. In order to solve the problems that the accuracy of the existing learning-based source code vulnerability mining method needs to be improved and the detection granularity is coarse, the application proposes a vulnerability mining method based on multi-task learning. The application can accurately identify the vulnerability and position the vulnerability at the same time, and improve the security vulnerability mining ability of the vulnerability mining personnel.