一种软件输入容错处理正确性的检测方法  

Correctness Detecting Method of Software Input Fault Tolerance Processing

作　　者：刘然 黄奇 蒋金虎 常宁 LIU Ran;HUANG Qi;JIANG Jinhu;CHANG Ning(Academy of Military Science,Beijing100091,China;Unit 61705 Beijing100093,China;School of Computer Science and Technology, Fudan University, Shanghai, 201203, China)

机构地区：[1]军事科学院,北京100091 [2]61705部队,北京100093 [3]复旦大学,计算机科学技术学院,上海201203

出　　处：《信息工程大学学报》2018年第6期743-748,共6页Journal of Information Engineering University

基　　金：上海市科委科研计划项目(17511102200)

摘　　要：介绍一种检测软件非法输入处理正确性的方法,采用类编译原理技术,分析源代码词法语法,获取源代码中的输入类控件信息。对输入类控件进行识别,找出未对非法情况进行处理的控件。该方法能检测软件是否对非法输入进行处理,帮助软件开发人员、测试人员发现软件漏洞,提高软件质量。This paper introduces a method to detect the correctness of abnormal input processing of software.By using the principle of compilation,the lexical and grammar of source code are analyzed and the input control in the source code is obtained.Further,it identifies the input controls and finds out the controls that fail to process the abnormal input.This method can detect whether the abnormal input is processed,and helps software developers and testers to find out software vulnerabilities and improve the quality of the software.

关 键 词：词法分析 语法分析 抽象语法树 符号表 控件识别 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]