基于检测工具的软件脆弱性分析模型研究  

RESEARCH ON ANALYSIS MODEL OF SOFTWARE VULNERABILITY BASED ON DETECTION TOOLS

作　　者：王雅丽[1] 李建良[1] 

机构地区：[1]西北农林科技大学信息工程学院,陕西西安712100

出　　处：《计算机应用与软件》2014年第7期21-23,54,共4页Computer Applications and Software

摘　　要：针对使用单一检测工具进行软件脆弱性分析,存在较高误报率、漏报率和重报率的问题,研究和设计一个基于多检测工具的软件脆弱性分析模型。该模型通过对不同检测工具的集成,对不同检测结果的优化处理,有效地降低了检测工具的误报率、漏报率和重报率。基于该模型设计一个实例,对其实用性和有效性进行验证,结果表明,经过多层次等级处理,有效降低了误报率、漏报率和重报率。To cope with the problem of high false negatives, false positives and repeated rate in the analysis of software vulnerabilities with single detection tool, we study and design an analysis model of software vulnerability which is based on multiple detection tools. With the integration of different detection tools and the optimised processing on different detection results, the model effectively reduces the false negatives, false positives and repeated rate of the detection tools. To verify the practicality and effectiveness of this model, we design an example based on it. The results show that after the multilevel hierarchical processing, the false negatives, false positives and repeated rate have been reduced effectively.

关 键 词：检测工具 软件脆弱性 多层次处理 误报率 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]