摘要
程序漏洞的发现与利用是当今信息安全面临的主要问题之一,传统的漏洞挖掘技术具有误报率高,覆盖率低等问题。据此情况,文中提出了一种新型的、基于程序流程跟踪的新型漏洞挖掘系统。本系统在静态测试漏洞挖掘技术的基础上,结合图论的相关知识生成测试样本,再利用基因算法改进测试样本,给出了一套完整的漏洞挖掘系统结构。该系统增加了程序覆盖度,更加高效、准确地完成漏洞挖掘工作。
Nowadays, the discovery and use of program vulnerability is the key problem in information security field. Traditional vulnerability mining technology has many limits, including low accuracy and low coverage. In this situation, this paper proposes a new vulnerability mining system using program process tracing technology. Based on static testing technology, combined graph theory like CCG and FCG, and with genetic algorithm to alter the testing samples, and complete vulnerability mining system is proposed and constructed. This system could extend the program coverage, implement efficient and accurate vulnerability mining.
出处
《信息安全与通信保密》
2013年第4期90-91,94,共3页
Information Security and Communications Privacy
关键词
程序漏洞
漏洞挖掘技术
静态测试
图论
基因算法
程序流程跟踪
program vulnerability
vulnerability mining technology
static testing
graph theory
genetic algorithm
program process tracing technology
