关于计算机软件程序漏洞实时检测仿真  

Real Time Detection and Simulation of Computer Software Program Vulnerabilities

作　　者：周喜平[1] 

机构地区：[1]郑州大学西亚斯国际学院,河南新郑451100

出　　处：《计算机仿真》2018年第1期247-250,共4页Computer Simulation

基　　金：河南省科技攻关项目(152102210130)

摘　　要：对计算机软件程序漏洞的实时检测,能够有效提升计算机软件质量。对软件程序漏洞的实时检测,需要评估软件损失或影响的严重性程度,得到攻击成功率的经验,计算软件程序风险态势值,完成程序漏洞实时检测。传统方法生成挂钩关键的堆内存操作函数监控指针,给出汇编层上跟踪指针的传播,但忽略了计算软件程序风险态势值,导致检测精度偏低。提出基于动态关联分析的程序漏洞实时检测方法。利用K-means理论构建特征集,给出特征集的计算机软件质量程序漏洞模型,定义攻击行为在程序节点上成功执行的可能性大小,得到攻击行为对计算机软件节点造成损失或影响的严重性程度,得到攻击成功率的经验,计算软件程序风险态势值,完成对计算机软件质量评估下程序漏洞实时检测。仿真证明,所提方法检测精度较高,并且可以准确获取软件行为信息,且具有较强的漏洞检测能力。ABSTRACT：This paper proposes a real-time detection method for program vulnerabilities based on dynamic associa- tion analysis. First of all, the feature set is established by using K-means theory to give program vulnerabilities model of computer software quality of feature set, and then successful execution possibility of aggressive behavior on program node is defined to obtain seriousness extent of computer software node damaged or influenced by aggressive behavior and experience of attack success rate. Finally, the risk situation value of software program is calculated and real-time detection of program vulnerabilities under quality evaluation of computer software is achieved. The simulation results show that the mentioned method has high detection accuracy. It can accurately obtain software behavior information and have strong vulnerability detection capability.

关 键 词：计算机软件 程序漏洞 实时检测 

分 类 号：N391[自然科学总论]