摘要
为了保证基于可信架构的可信软件的安全性,给出了可信软件安全性分析的总体架构及其工作原理。提出了一个静态分析技术与动态测试技术相结合的有效机制,实现了静态分析和动态跟踪的交互协作,提高了安全分析的效率。设计了一种可执行代码中间表示的方法,给出了建立程序存储空间抽象模型和程序抽象运行时刻环境的方法。详细地讨论了程序的控制流和数据流分析技术,并给出了求解算法。最后,概述了程序动态测试系统。
To ensure the security of the trusted software based on the trusted architecture, an overall architecture and the principle for trusted software security analysis are introduced. This architecture is characterized with coexistence of static analysis and dynamic testing, as well as program attributes sharing. A simple intermediate representation of binary executables is presented. Program＇ s memory space abstract model is built and the run-time environment is described. Data flow analysis and control flow analysis are discussed in detail. Finally, the dynamic testing system is given.
出处
《计算机工程与设计》
CSCD
北大核心
2010年第22期4802-4805,共4页
Computer Engineering and Design
基金
国家863高技术研究发展计划基金项目(2007AA01Z483)
河南省科技创新基金项目(082102210011)
关键词
可信软件
静态分析
动态测试
控制流分析
数据流分析
trusted software
static analysis
dynamic testing
control flow analysis
data flow analysis
