Dissertation > Excellent graduate degree dissertation topics show

Research of Data-driven Vulnerability Detection Technology

Author: WenXueWei
Tutor: NingHui；ZhangHaiQuan
School: Harbin Engineering University
Course: Computer technology
Keywords: Data-driven vulnerability Static detection Semantic analysis
CLC: TP393.08
Type: Master's thesis
Year: 2011
Downloads: 12
Quote: 0
Read: Download Dissertation

Abstract


With the ripeness of computer technology and the application of internet in different fields,information security is becoming more and more important.Different kinds of software vulnerability may be used to cause different kinds of problems by computer virus and.Data-driven vulnerability is one of the most common vulnerabilities in all of the vulnerabilities.The number of data-driven vulnerability account for about 50% above of all the vulnerabilities according to the CERT reports at recent years.Data-driven vulnerability is usually found in the softwares which ared coded by C/C++.For the typical programming languages C/C++,the root cause of Data-driven vulnerability is that the C/C++ has a security flaw. For example,C/C++ don’t check the array boundary and so on.Moreover,the security problems which are caused by data-driven vulnerability are usually ignored by programmers.Now the static detection gives the vulnerability report by using lexical analysis and syntax analysis which are based on complie method.However,the static detection now still has some flaws.Generally speaking,the detections have such flaws as follows:the test result will have the massive misinformations、to fail to report, the test result rate of accuracy will be low; it will consume the system resources, the examination efficiency is quite low.In response to this situation,an algorithm based on semantic analysis to detect data-driven vulnerability automatically is presented. The algorithm defines lexical elements and syntax elements,on the base of the lexical elements and the syntax elements, through the buffer searches in advance, interval operation and improvement wagner algorithm and so on methods, it has realized to vulnerability semantic level examination. Compared to the traditional static detection which use complie method,the new static detection make a more accurate detection for data-driven vulnerability,and the detection system improves efficiency. In the end,a static detection system is designed and complied,and is proved valid by experiment.

Related Dissertations

  1. Tourism Comments on the Internet’s Semantic Analysis and Usefulness Research,TP391.1
  2. Research and Design of a C++ Codes Defect Detection System,TP311.53
  3. C static code checking syntax tree Construction Methods,TP311.53
  4. Research on Topic Clustering Model of Socail Tagging Based on Bayesian Theory,C93
  5. Research on Approaches of the Subjective Automated Assessment,TP391.1
  6. Finding Web Services Based on Clustering Probabilistic Semantic Approach,TP393.09
  7. A Static Behavior-Based Method to Detect Malware on Android,TP309
  8. Emotional background music for movies Classification Method,TP391.1
  9. Content-based malicious code detection Research and Implementation,TP393.092
  10. Image / video automatic replacement of the face,TP391.41
  11. Based on the model and features of the package ML_pLSA Target Recognition Algorithm,TP391.41
  12. Based on semantic analysis of text mining research,TP391.1
  13. Detection and Analysis of Malware Network Behavior Based on Isolation Environment,TP393.08
  14. Chinese named entity recognition and disambiguation of,TP391.1
  15. The Design and Implementation of Geocoding Engine,P208
  16. Limited natural language analysis and understanding of building plans,TU204
  17. Japanese onomatopoeia Onomatopoeia learning,H36
  18. Semantic Analysis and Interpretation of Rhetoric of "Li" and the Words Include "Li",H13
  19. Research on the Buffer Overflow Technology Based on GCC,TP393.08
  20. Research on Malicious Code Detection Technology for E-mail System,TP393.08
  21. Research on Post-processing Techniques of Mathematical Formula Structural Analysis,TP391.4

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile