Static detection method and detection system for incremental codes

Abstract

The invention relates to the technical field of computer science, in particular to a static detection method and system for incremental codes. The static detection method specifically comprises the following steps of identifying an increment part of a to-be-detected code, constructing an abstract syntax tree, synthesizing a function call graph of the to-be-detected code, constructing a value dependency graph of the increment part and a value dependency graph of the to-be-detected code, and performing vulnerability detection on the value dependency graph of the to-be-detected code to obtain a static detection result of the increment code. And performing static analysis on the original code and combining the static detection results of the original code and the incremental code to obtain a static detection result of the to-be-detected code. The problems that in the prior art, a static detection method is poor in precision and prone to missing report or false report, and after codes are updated, the full detection period is long, resource consumption is large, and economical efficiency is poor are solved. The method has the advantages that analysis time and internal storage are greatly shortened, efficiency is high, cost is low, and precision is high.

Description

technical field [0001] The invention relates to the technical field of computer science, and more specifically, to a static detection method, a detection system, electronic equipment and a storage medium of incremental codes. Background technique [0002] The detection technology of program code often uses the dynamic detection method of program running, that is, the new program is tested and run, and technical problems are found and solved during the period. It has a long detection cycle, high requirements for test cases, and it is difficult to complete comprehensive detection within a limited time; static analysis Technology is a code analysis method that only uses source code information, does not need to be compiled and run, finds problems in the code through an automated review process, and evaluates code quality. It can effectively verify the code's standardization, reliability, and maintainability. Performance and other indicators, reducing the cost of software testin...

AI Technical Summary

Problems solved by technology

[0003] The inventors of the present invention have discovered that the precision and accuracy of the existing static detection method needs to be further improved, and the existing static detection method has multiple concurrency due to its behavior. False positives and negative negatives are prone to occur; furthermore, the existing static detection methods all involve the detection of a certain fixed code, and it is often necessary to re-test all codes for codes that are upgraded and iterated, which requires a lot of manpower and material resources again. There is an urgent need for a static detection method for incremental code to replace the updated fixed code or full program detection in the prior art

Images