DCR-based dynamic vulnerability detection method and system

Abstract

The invention discloses a DCR-based dynamic vulnerability detection method and a system. The method comprises the following steps: 1) reconstructing a vulnerability detection system on the basis of a DCR parallel computed structure feature; 2) generating a test task according to a seed test case input to an initial task and putting into a task queue of a dispatching node; 3) distributing the task in the task queue to an idle calculation node by the dispatching node; 4) executing the corresponding test task by the calculation node, after ending the execution, taking the newly generated test cases and the test case resulted in target program crash as calculation results and sending to the dispatching node; 5) stipulating all the received calculation results by the dispatching node, organizing all the newly generated test cases into test tasks and transferring to the task queue, and storing the test case resulted in target program crash; 6) repeating the steps 3)-5) till the task queue is empty, and then confirming the vulnerability of the target program according to the stored test case resulted in target program crash.

Description

technical field [0001] The invention relates to a DCR-based dynamic loophole mining system and method, belonging to the fields of software engineering and information security. Background technique [0002] With the development of network technology, computer technology has been popularized rapidly, but it has also produced many security problems. Among them, vulnerability is the most important factor threatening network security. Due to the existence of loopholes, hackers or criminals can steal user information, elevate system privileges, and seriously threaten the security of users and even the country. Especially some 0day vulnerabilities, because they have not been repaired in time, threaten the security of the network even more. [0003] In response to repeated security issues, the country has gradually put security issues on the agenda and paid enough attention to them. The “National Vulnerability Database” provided by the China Information Security Evaluation Cente...

AI Technical Summary

Problems solved by technology

[0005] With the rapid development of information security and vulnerability mining technology, the current vulnerability mining algorithm has a large amount of calculation and high algorithm complexity. The vulnerability mining test with a certain binary application as the test target often takes several months to run, which is very time-consuming.

Images