首页|基于敏感语义关联的代码切片及应用研究

基于敏感语义关联的代码切片及应用研究

扫码查看
利用程序的可伸缩性对程序进行代码切片,识别出受敏感变量影响的关键语句,消除噪声并挖掘程序内部依赖,用以检测代码的漏洞与缺陷.针对切片对依赖过于敏感的问题,提出一种基于敏感语义关联的代码过程间切片方法,提取表征敏感信息的有效语句,捕获语义依赖关联,将代码漏洞触发点转化为上下文敏感的缺陷依赖流,并基于约束规则提升切片效率,结合缺陷约束获取代码漏洞的异常来源.实验结果表明:该方法在代码切片的效率、质量以及漏洞检测的精度上有较好的表现.
Research on Code Slicing Based on Sensitive Semantic Association and Its Application
By utilizing the scalability of the program to slice the code of the program,key statements affected by sensitive variables can be identified,noise can be eliminated,and the internal dependencies of the program can be mined,so as to detect vulnerabilities and defects in the code.In order to solve the problem of the excessive sensitiv-ity of slicing to dependencies,this paper proposes an inter-procedural slicing method of the code based on sensitive semantic association,which extracts effective statements that represent sensitive information,,captures semantic de-pendent association,transforms the trigger points of code vulnerabilities into context-sensitive defect dependency flows,improves slicing efficiency based on constraint rules,and obtains the abnormal source of code vulnerabilities in combination with defect constraints.Experimental results show that this method performs well in the efficiency and quality of code slicing and the accuracy of vulnerability detection.

Code slicingSensitive semanticsControl flowVulnerability detection

帅活力、唐成华

展开 >

桂林电子科技大学广西可信软件重点实验室 广西桂林 541004

代码切片 敏感语义 控制流 漏洞检测

国家自然科学基金广西可信软件重点实验室项目广西壮族自治区研究生教育创新计划

62062028202320YCSW2023295

2024

科技资讯
北京国际科技服务中心 北京合作创新国际科技服务中心

科技资讯

影响因子:0.51
ISSN:1672-3791
年,卷(期):2024.22(4)
  • 8