16 results about "Program slicing" patented technology

The invention discloses a bug repairing method and system based on a grammar semantic tree, and the method comprises the steps: extracting a repairing mode fusing a grammar structure and a semantic intention from a historical bug repairing case, and guaranteeing the accuracy of the mode through program slicing guided by a key entity and iterative verification; on the basis of a double-constraint mechanism of grammar mergibility and semantic consistency, a specific mode is generalized to construct a hierarchical grammar semantic tree knowledge base; a knowledge base is used for generating a plurality of candidate patches for new vulnerabilities, single high-quality patches are generated through structure, grammar and semantic three-dimensional clustering and in-cluster integration and fusion, and the patches are output after heuristic sorting. According to the method, the defects that in the prior art, semantic understanding is shallow, and patch quality is unstable are overcome, and repairing accuracy, generalization ability and engineering practicability are remarkably improved.

The application provides a computer network security software debugging method and system. A plurality of test nodes of a source program in target network security software are set, a key test node is located based on an execution state at each test node, and a target search domain when the source program is tested is constructed by program context information of the key test node. A plurality of program slices with abnormalities in the source program are determined based on a static control flow graph and a dynamic control flow graph of program code in the target search domain. Test overhead of each program slice is determined according to test coverage information of each program slice and path complexity when the source program is tested. Constraint levels of each program slice are determined according to all test overhead and membership between each program slice. Each program slice is debugged through the constraint level of each program slice. The above scheme can accurately point to a problem code line in a network security software debugging process based on constraint levels of each program slice.

The application provides a vulnerability false alarm elimination method for a continuous integration platform, which captures vulnerability warning code features generated by program static analysis through a deep learning neural network, sorts and classifies the warnings, thereby eliminating false alarms in the warnings, and updates and optimizes the model using incremental warning data generated in the project continuous integration process. The steps include: obtaining historical warning data and corresponding warning label data of a Java project on a continuous integration platform; performing program slicing, tokenization and vectorization on the program corresponding to the warning; training a deep learning neural network to obtain a vulnerability false alarm elimination model; and adding the model to the continuous integration process of the project to enable the model to be continuously updated and optimized with project iterations. The application reduces the time cost of developers checking program static analysis vulnerability warnings in the project continuous integration process and improves the efficiency of processing warnings.

This invention belongs to the field of code security detection and automated repair technology. Specifically, it is a closed-loop system for automated repair and verification of code vulnerabilities based on unit tests. It completes vulnerability root cause localization and feature extraction through program slicing and static analysis. Then, based on the vulnerability root cause, it generates reproducible test cases with multi-dimensional assertions and regression test cases that meet coverage standards. Candidate patches are generated through retrieval enhancement and invalid patches are filtered out by static pre-verification. Patch verification is completed in an isolated sandbox using core and auxiliary dual-dimensional rules. Failure results are classified into scenarios and structured semantic feedback is generated to guide iterative repair. Finally, successful cases are structured and stored in a knowledge base in the form of triples to achieve self-evolution. This invention solves the core problems of existing technologies, such as unstable reproducible test cases, low iterative convergence efficiency, inability to identify overfitted patches, and lack of self-evolution capabilities. It can achieve fully automated repair and verification of code vulnerabilities, meeting the requirements for production environment application.

Embodiments of the present application provide a chip program debugging method and system without passive code and a medium. The method comprises: obtaining a chip program, slicing the chip program based on a program slicing technology to obtain a plurality of program slices; receiving a debugging instruction, analyzing function information of the debugging instruction based on the debugging instruction, and executing a corresponding debugging program according to the function information of the debugging instruction; linking the plurality of program slices to generate a plurality of debugging groups, performing program debugging on the plurality of debugging groups based on the debugging program, and generating a sub-debugging result corresponding to each debugging group; integrating the plurality of sub-debugging results to obtain a final debugging result, and saving the final debugging result to a register. The chip program is sliced by the program slicing technology, the plurality of program slices can be grouped and debugged or debugged in parallel, the debugging flexibility is improved, the number of program instructions analyzed by a developer is reduced, and the work efficiency is improved.

The embodiment of the invention provides an application program slicing processing method, terminal equipment and related products, and the application program slicing processing method comprises the following steps: in response to a slice establishment request initiated by an application program, determining whether the slice establishment request meets a preset slice establishment condition; when it is determined that the slice establishment request meets the preset slice establishment condition, the slice establishment request is sent to the network side device, and a response message returned by the network side device is obtained; judging whether the slice parameter information contained in the response message is matched with the slice requirement of the application program or not, and determining whether to trigger the network side equipment to execute slice establishment operation for the slice establishment request or not based on a judgment result. Through the embodiment of the invention, the risk of abnormal collapse of a chip and an operating system or network signaling storm caused by blindly initiating the session establishment request to the network by the terminal equipment can be avoided, the success rate of slice establishment is improved, and the application program obtains expected network performance and service quality.

The present application belongs to the technical field of software vulnerability mining, and specifically relates to a kind of Android application user privacy leakage vulnerability identification method.The present application includes: two-way program slicing analysis, privacy information identification based on correlation analysis and machine learning method assistance, and non-injective data transformation analysis.Two-way program slicing analysis is used to detect data received by Android application from the server end and judge whether they flow to user interface function;Privacy information identification based on correlation analysis and machine learning method assistance can comprehensively analyze which of the above server end returned information belongs to the privacy information of other users;Non-injective data transformation analysis is used to detect how user data is transformed on the client side before being presented to the user, and then judge whether the "data minimization" principle is followed and whether there is a privacy risk.

The invention provides an AI test case generation method, a server, a medium and a product. In the method, a server firstly collects code change data of a detected object, inputs the code change data into a correlation analysis model to obtain a current defect risk level, then establishes a mapping relation between the defect risk level and a generation control parameter, and determines a matched semantic similarity threshold value and a slice weight coefficient. And then, the server performs program slice analysis on the code change data to obtain candidate program slices, and calculates priorities by using slice weight coefficients and attribute characteristics of the candidate program slices to determine a target program slice. And finally, the server generates a test intention description based on the target program slice, maps the test intention description into a multi-dimensional intention semantic vector, and generates a test case code only when semantic repetition does not exist by calculating a size relationship between a vector similarity and a semantic similarity threshold. According to the method, the problem that the generated test suite contains a large number of low-efficiency cases is relieved, and the overall test efficiency is improved.

The application provides a computer program vulnerability detection method and system, the method comprises the following steps: obtaining source code and converting it into a plurality of IR instructions, selecting a plurality of to-be-identified instructions from the IR instructions; obtaining program slices based on the to-be-identified instructions, obtaining a semantic vector set and a metric vector set of the program slices; constructing an instruction relationship graph corresponding to the program slices and obtaining a relationship dependency vector of the instruction relationship graph; unifying the dimensions of the semantic vector set, the metric vector set and the relationship dependency vector, and then weighting and integrating them into a final vector; judging whether the program slices have vulnerabilities based on a neural network model and the final vector. By merging the semantic vector set, the metric vector set and the relationship dependency vector into the final vector, point, line and surface three-dimensional detection of computer program vulnerabilities is realized, the comprehensiveness of computer program vulnerability detection is ensured, and the accuracy of vulnerability detection is improved.

The application discloses a software test problem positioning and repairing method and device. The method comprises the following steps: collecting log data in a software test process, taking a log event as a node, taking a causal relationship, a time sequence relationship and a module correlation relationship between events as edges, and constructing a test log correlation graph; adopting a graph neural network to update and classify node features of the test log correlation graph, adding an abnormal propagation weight factor in a node updating formula, positioning an abnormal source node in the test log correlation graph, and taking the abnormal source node as a log event corresponding to a problem root cause; based on the abnormal source node, combining code execution paths and data dependency relationships to verify the root cause, extracting a code segment corresponding to the abnormal source node through a program slicing technology, and tracing input data and an intermediate calculation process corresponding to the abnormal source node through data dependency analysis, and confirming the accuracy of problem root cause positioning.

This invention relates to the field of computer technology, and more particularly to a method and computer device for performance fault diagnosis. The method includes: acquiring at least two program slices corresponding to a target program; acquiring first performance information corresponding to each program slice; classifying each program slice based on the first performance information; confirming the classification result; determining the target process in the target program where a fault has occurred based on the classification result and the first performance information; and determining the cause of the performance fault in the target program based on the faulty target process and a pre-constructed performance fault decomposition architecture. This method only requires capturing the function call process during program execution, and then analyzing and outputting results based on the captured results for the target program slices, greatly protecting the security and privacy of the tested program and significantly improving work efficiency.

The invention belongs to the technical field of computer network security, and particularly discloses a code detection method and device based on a multi-dimensional model, equipment and a storage medium. According to the method, the target program slice is generated according to the vulnerability concern; model input parameters are generated according to the target program slices, and new function codes are generated based on the multiple code large models; calculating text similarity according to a plurality of text similarity algorithms, and calculating structural similarity according to a plurality of structural similarity algorithms; and performing vulnerability detection on the to-be-detected code based on the target machine learning model. Through the above mode, the advantages of deep mining of inherent semantic and structural information of codes by the code large models and efficient identification and classification of the machine learning model are fully utilized, the new function codes are generated based on the multiple code large models, and then vulnerability detection is performed based on the target machine learning model. Therefore, the code detection efficiency and accuracy can be effectively improved, and the method is suitable for scenes of various programming languages and vulnerability types.

This disclosure provides a code verification method, apparatus, device, and system, relating to the field of computer technology. The method includes: running runtime data of a benchmark test program based on a reference model to determine a target program slice in the benchmark test program; wherein the reference model is a software model that simulates hardware description code, and the first runtime data corresponding to the target program slice satisfies preset runtime characteristics; running the target program slice through the hardware description code to obtain second runtime data; and determining the verification result of the hardware description code based on the first and second runtime data. This method can improve verification efficiency.

A source code vulnerability detection method based on a multi-relation graph, which first cuts the C language source code data set from the standard vulnerability database SARD and the NVD data set, generates an AST and obtains its program slice by means of Joern; secondly, in order to capture the additional syntax information of the AST, the AST is expanded by using a compiler to add edges carrying additional information to enhance its structure and connectivity, and then the enhanced AST is converted into a multi-relation graph; finally, a multi-relation graph attention network is constructed to learn an embedding vector. A plurality of code relations are extracted from the source code by using the graph attention network, and a global embedding vector is learned by using the adjacency matrix and the initial node representation of the multi-relation graph, and the global embedding vector is normalized and fed into a softmax layer for processing. By means of the newly designed representation mode and the multi-relation graph aggregation learning, the application can provide a better code representation for the downstream software vulnerability detection task, so as to realize an accurate, efficient and more applicable vulnerability detection method.

This invention discloses a method for detecting multi-attribute incremental models in synchronous language programs, comprising the following steps: S1, performing lexical and syntactic analysis on the synchronous language program to obtain an abstract syntax tree, and then transforming the complex program into a simple program containing only a unique node with a memory depth of 1; S2, using a program slicing algorithm to delete data streams and equations unrelated to the attributes to be verified, resulting in a simplified program; S3, constructing basic formulas for the bounded model detection engine thread and inductive formulas for the inductive engine thread; S4, executing the bounded model detection engine thread, the inductive engine thread, and the program abstraction engine thread in parallel, and controlling the synchronization between these threads through a message passing mechanism. This invention can accelerate the verification speed, thereby alleviating the problem of slow verification speed in existing model detection technologies.

The application provides a runtime exception detection method fusing slice testing and formal verification, comprising the following steps: adopting program slicing to extract a minimized code segment related to a potential abnormal program point from a program to be detected; generating a test case based on the minimized code segment related to the potential abnormal program point; and executing the minimized code segment containing the test case to obtain a detection result; the method can not only detect known exceptions, but also cover more potential exceptions through automatic path analysis, especially complex input scenarios and dynamic behavior triggered exceptions, and the scheme can identify abnormal paths in advance and reduce post-analysis after actual exception occurrence.