A vulnerability detection method based on kernel control flow graph cyclic verification

Abstract

The invention relates to a vulnerability detection method based on kernel control flow graph cyclic verification. The method comprises the steps of 1) generating the CCFG of a n-day vulnerability; 2)generating a to-be-tested program CFG, and searching a core of the vulnerability CCFG in the to-be-tested program CFG; 3) circularly verifying the vulnerability CCFG around the core on the CFG of theprogram to be tested, and calculating the vulnerability rate of the program to be tested; and 4) comparing the vulnerability rate of the to-be-tested program with a threshold value, judging whether the vulnerability exists in the to-be-tested program, positioning the vulnerability according to the position of the candidate vulnerability core, and outputting a vulnerability retrieval report. The invention aims to solve the problem that the n-day vulnerability detection accuracy based on a control flow graph-based vulnerability detection method is not enough, and provides the concept and the technology of kernel control flow graph and cyclic verification and the complete vulnerability detection method based on kernel control flow graph cyclic verification. According to the present invention,the accuracy of the vulnerability mining personnel at the n-day vulnerability is improved, and further the security vulnerability mining capability is improved.

Description

technical field [0001] The invention belongs to the technical field of computers, and in particular relates to a loophole detection method based on cyclic verification of a nuclear control flow graph. Background technique [0002] With the development of the computer industry, computer software has become an integral part of life, and computer systems are widely used in various industries, including medical, education, military, political and new retail and other fields. With the rapid development and popularization of computer systems, software vulnerabilities have become a major problem that threatens the security of computer systems. In the software life cycle, various loopholes appear frequently, which are easy to be exploited by hackers, resulting in property losses. According to data released by MITER, as of November 2018, there were about 109,000 entries in the CVE (Common Vulnerabilities and Exposures, public vulnerability and exposure database), and the number of v...

AI Technical Summary

Problems solved by technology

However, in these methods, if the program under test is modified or re-developed at the program code segment containing the n-day vulnerability, there will be some differences between the vulnerable code segment in the program under test and the graph structure of the original n-day vulnerability. difference

In this case, the similarity of the graph will be reduced, resulting in a decrease in the accuracy of the vulnerability detection method based on the graph structure

Images