漏洞检测静态分析方法的优化策略

Optimization Static Analysis for Detecting Software Vulnerabilities

目前软件漏洞静态解决方案大都有针对性的检测某些方面的软件漏洞,无法做到全面、高效、准确的检测出所有漏洞。通过讨论目前已有的一些漏洞检测技术与工具,并研究这些工具与技术各自存在的优势与缺陷。在此基础上提出改进漏洞检测静态分析的优化策略。

Almost existing solutions for detecting software vulnerabilities process some breaches, none of them can detect all of the vulnerabilities efficiently and trustworthily. By discussing some techniques and tools for vulnerability detection and advantages and disadvantages of the tools and techniques. On this basis, the paper proposed an optimization strategy on improving the static detection and analysis of vulnerabilities.