80x86汇编语言安全性编码规则检查工具的设计与实现

Design and Implementation of Security-encoding Checking Tool for 80x86 Assemble Language

从安全性角度提出80x86汇编语言程序的编码规则。通过分析航天型号典型案例,依据型号软件的应用特点,从代码结构、指令使用、中断控制、算法设计等角度对安全性编码规则进行分类,提出具体要求。设计了对应规则的检查方法和检查工具,采用静态分析方法,从软件源代码中提取安全性规则的相关元素,判断代码与规则的符合性,实现规则自动检查。

This paper presents the security encoding rules for 80 x 85 assemble language. The rule designing are based on the analysis of aerospace software cases, which focus on the features of code framework, instructions, interruptions control and algorithms design to classify, specify requests and conclude regarding the security rules. Finally, a security-encoding checking tool is designed, which can automatically estimate whether the source code is accordant with encoding rules or not.