Constructing a Knowledge Base for Software Security Detection Based on Similar Call Graph

Jingfeng Xue,Changzhen Hu,Kunsheng Wang,Rui Ma,Bingxin Leng
DOI: https://doi.org/10.1109/ICCEE.2009.66
2009-01-01
Abstract:Software structure is very important for software security. But it is very difficult to obtain software structure by software execution trace. In this paper, by researching system call sequences in the process of software execution, similar call graph is proposed. We present how to generate similar call graph by observed system call sequences. Based on this, a knowledge base for software security detection is constructed. Experiments show false alarm rate can be decreased effectively by the knowledge base and detection rate is higher by using appropriate threshold.
What problem does this paper attempt to address?