Abstract:The security defect detection technology based on source code usually makes use of static analysis methods to detect security vulnerabilities in the test software, which does not consider the runtime information of program execution and the interaction information with the program runtime surrounding environment, so the security defect detection technology based on source code usually results in higher false positive rate. The binary program vulnerability detection methods based upon dynamic analysis usually have lower false positive rate, but their effectiveness depends entirely on test case generation, the detection efficiency of dynamic analysis based on binary program is lower. Moreover, the research of source code vulnerability detection technique and binary executable vulnerability detection technique are essentially fragmented, without considering the relationship between the two classes of methods. In order to improve the efficiency for source code and binary executables vulnerability detection, we presents a collaborative analysis method for vulnerability detection of source code and binary executables based upon the unified defect mode set, meanwhile, we verify the effectiveness of our method using a concrete example in this paper.

Analysis Model of Binary Code Security Flaws Based on Structure Characteristics

Vulnerability Analysis Framework for Binaries Based on Model Checking

Analysis of Software Structure Vulnerabilities

Survey of Static Analysis Methods for Binary Code Vulnerability

Code based software security vulnerability analyzing and detecting based on similar characteristic

Differential analysis on dynamic binary and its application in malicious code analysis

Research on the Collaborative Analysis Technology for Source Code and Binary Executable Based Upon the Unified Defect Mode Set

AADL Vulnerability Modeling and Security Analysis Method

A new method for analyzing and improving security protocols

Program Structure Parsing Model Design in Software Security Reverse Analysis

An efficient control flow security analysis approach for binary executables

A New Static Analysis Model in Source Code

The New Progress in the Research of Binary Vulnerability Analysis

Model Logic Approach for Analyzing the Flaws of Security Protocol Cryptosystem-related Flaws

Reliability analysis of digital protection's software based on architecture

Structure vulnerability analysis method of complex information system

A Program Vulnerabilities Detection Frame by Static Code Analysis and Model Checking

A Vulnerability Exploits Detection Method Based on Binary Program Behavior Analysis

Flaw function static detection method for executable

Model checking obfuscated binary malicious code

Research on computer-aided formal modeling for security protocol code