Software vulnerability discovery system and method based on attribute extraction

Abstract

The invention provides a software vulnerability discovery system and method based on attribute extraction and belongs to the field of computer safety. The system comprises a key code discovery module, a vulnerability analyzing module and a vulnerability deduction module. The method includes the following steps: extracting key codes of software to be tested; executing the software to be tested in the virtual machine environment and adopting a virtual machine fault injection engine and the key codes to conduct testing interaction and record a testing result; conducting deduction by combining the testing result and the discovery experience knowledge base. The system and the method effectively achieve complex causal relationship between uncertain software flaw and loopholes. The software vulnerability discovery system method based on the attribute extraction has certain advantages in the aspects of safety, flexibility and compatibility.

Description

technical field [0001] The invention relates to the field of computer security, and relates to software loophole mining technology, in particular to a software loophole mining method based on attribute extraction. Background technique [0002] With the development of information technology, computer software plays an important role in various fields such as economy, education, and national defense. In this case, software security has become an important issue that people pay more and more attention to. Among them, loopholes refer to some functional or security logic defects in the system or software, including all factors that cause threats and damage the security of the computer system, and are the specific realization of the hardware, software, protocol or system security strategy of the computer system. flaws and deficiencies. Due to various reasons, the existence of vulnerabilities is inevitable. According to the statistics of vulnerability data collected by China Nati...

AI Technical Summary

Problems solved by technology

Among various vulnerability analysis techniques, although the manual testing technique is simple to implement, the testing process is highly dependent on the tester; Fuzzing technology has the advantages of easy vulnerability reproduction and no false positives, but it is not universal and has the disadvantages of long construction and testing cycles; The lack of comparison technology is greatly affected by compiler optimization; static analysis technology cannot find security holes in the dynamic running process of the program, the detection result set is large, and the false alarm rate is high; dynamic analysis technology can meet the needs of some security detection, but There are still relatively large limitations, such as low efficiency, not easy to find analysis points, and high requirements for analysts.

Images