Vulnerability Analyzer Route Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vulnerability detection methods require a huge amount of calculation to determine if a program can reach an inconvenient state due to illegal input, making them impractical for confirming security vulnerabilities.
Innovation Solution
A vulnerability analyzer that includes a single route derivation unit, variable analysis unit, memory editing unit, and vulnerability existence determination unit to derive and analyze route information, set virtual addresses, and determine if actual values satisfy attack execution conditions, thereby efficiently identifying potential vulnerabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional vulnerability detection methods are used to determine whether a program can reach an inconvenient state due to illegal input, then comprehensive vulnerability evaluation is achieved, but a huge amount of calculation is required making it impractical
Solution Approach 1:
The patent segments the program's control flow into multiple routes from the start position to the attack determination position. By dividing the analysis into individual routes rather than analyzing all possible states simultaneously, the method reduces computational complexity while maintaining comprehensive vulnerability evaluation. Each route is analyzed separately to determine if it can reach an inconvenient state, making the overall process practical and efficient.
2Difficulty of detecting and measuring
If state set calculation is performed to detect security vulnerabilities, then vulnerability detection capability is provided, but the calculation burden becomes excessive and impractical
Solution Approach 1:
The patent extracts and focuses only on the essential elements needed for vulnerability detection: specific routes from start position to attack determination position, and the inconvenient states at those positions. By taking out only the necessary route information and state information rather than calculating complete state sets, the method maintains strong vulnerability detection capability while significantly reducing calculation complexity.
Solution Approach 2:
The patent performs preliminary actions by pre-identifying attack determination positions and pre-segmenting routes before conducting the full vulnerability analysis. This preliminary structuring of the program flow allows subsequent analysis to proceed more efficiently by working with predetermined routes rather than exploring all possible state transitions.
Data Source
AI summary
A vulnerability analyzer includes: a single route derivation unit for deriving single route information from an attack determination position to a start position of program information; a variable analysis unit for deriving actual value range information from information of a branch condition and a branch result in the program information; a memory editing unit for setting a virtual address and an input flag corresponding to input variable information, storing actual value information of the input variable information, and storing actual value range information from the variable analysis unit; and a vulnerability existence determination unit for extracting variable information of an attack execution condition, acquiring the actual value information and the actual value range information corresponding the variable information, calculating limited input actual value information when the input flag is set to the virtual address, and determining if the limited input actual value information satisfies the attack execution condition.