开源软件漏洞补丁的采集与整理

Open source software vulnerability patch collection and management

针对美国国家漏洞数据库(National Vulnerability Database,NVD)中开源软件的漏洞,设计并实现了漏洞补丁采集与分析系统。该系统能自动采集漏洞补丁文件,生成漏洞补丁库。基于漏洞补丁数据,提取补丁特征并进行分类整理,为不同类型漏洞提供有效的漏洞检测方法等研究提供了数据和分析基础。

This paper presents a software vulnerability patch collection and analysis system for vulnerabilities of open source software in the National Vulnerability Database （NVD）. The system collects vulnerability patches automatically and generates the vulnerability patch database. It extracts the patch features from the vulnerability patches and then classifies and orders them. The system can provide the data and analysis basis for the study of effective vulnerability detection approaches for different types of vulnerabilities.