C源代码静态安全检查技术

Static Security Examining for C Source Code

对源代码进行安全检查就是在程序运行之前通过分析源程序发现潜在的安全缺陷。该文分析了C语言源程序中可能发现的安全问题,介绍了目前静态代码安全检查的技术和方法以及面临的困难,最后,给出了一些提高程序安全性的建议。

A static security examiner is to find vulnerabilities by statically analyzing source codes before they are executed. The paper analyzes what possible problems can be found in C source codes, introduces some current researches on static code security examining as well as those difficulties encountered. As a conclusion, it gives some advice for improving program security.