The application discloses a
software abnormal behavior early warning and intelligent tracing method and
system for a secret-related environment, relates to the technical field of
software development, and solves the technical problems that the abnormal
escape rate is high, risk early warning lags behind, decision-making lacks basis,
release management and control is extensive, tracing and positioning is inefficient, and it is difficult to adapt to the precise early warning and intelligent tracing demand of
software abnormal behavior in the secret-related environment; the features extracted from the
abstract syntax tree from the
syntax level can get rid of the interference of the surface form of the code, accurately capture the structured nature of the secret-related code; the actual running path of the code is restored from the execution dimension through the
control flow graph, and the quantifiable execution
logic complexity is combined with the logic to enhance the features. The
logic complexity analysis can quickly locate the high-risk features in the secret-related environment, and provide bottom feature support for the abnormal behavior early warning. The
correlation analysis is based on the CFG and variable dependence; core quantitative indicators are set for each release link to realize link-level risk
decomposition.