Binary software vulnerability detection system and method based on dynamic taint tracking

Abstract

The invention provides a binary software vulnerability detection system and method based on a dynamic taint tracking technology, which mainly solve the problems of high expenditure, poor applicabilityand under-pollution caused by incomplete semantic information during operation in the prior art. The detection system comprises a stain marking module, a vulnerability detection module, a stain propagation analysis module and an API call processing module. The API calls the processing module and the taint propagation analysis module to determine a taint source and a detection point of the system;the stain marking module allocates a stain marking storage structure. The taint propagation analysis module and the API call processing module track taint mark propagation of instructions, kernel system calls and C standard library functions in the running process of the monitored software. The vulnerability detection module detects whether the propagation of the taint data triggers a software vulnerability detection rule. According to the method, the dynamic stain tracking efficiency and accuracy of the system are improved, the applicability of the system is expanded, and the method can be used for detecting the vulnerability of binary software.

Description

technical field [0001] The invention belongs to the technical field of information security, and particularly relates to a binary software vulnerability detection system and method, which can be used in the ELF file format under the Linux environment or the PE file format under the Windows environment, and utilize dynamic stain analysis technology to detect the vulnerability of the binary software. Vulnerability detection to detect the vulnerability of binary software and defend against vulnerability attacks encountered by the software during operation. Background technique [0002] With the development of computer technology, computer software has penetrated into important fields such as national defense, enterprises and individuals. Once some key software is damaged, it will cause immeasurable losses to the entire computer information system. Therefore, the security of computer software has always been an issue. An important topic of information security research. [0003...

AI Technical Summary

Problems solved by technology

[0009] The object of the present invention is to address the deficiencies of the above-mentioned prior art, and propose a binary software vulnerability detection system and method based on dynamic taint tracking, which is used to solve the problems of high performance overhead and poor applicability of dynamic taint tracking in the prior art, and The problem of under-pollution caused by incomplete logical semantic information of taint propagation

Images