基于关联规则的终端软件缺陷检测方法研究  

Research on detection method of terminal software defects based on association rules

作　　者：吕华辉 刘欣 农彩勤 LV Huahui;LIU Xin;NONG Caiqin(China Southern Power Grid Co.,Ltd.,Guangzhou 510000,China;China Southern Power Grid Digital Grid Research Institute Co.,Ltd.,Guangzhou 510663,China)

机构地区：[1]中国南方电网有限责任公司,广东广州510000 [2]南方电网数字电网研究院有限公司,广东广州510663

出　　处：《电子设计工程》2023年第5期61-64,69,共5页Electronic Design Engineering

摘　　要：目前研究的终端软件缺陷检测方法对软件未知缺陷检测的命中率较低,对软件已知缺陷的误报率较高。为了解决上述问题,基于关联规则研究了一种新的终端软件缺陷检测方法。利用二进制提取终端软件的缺陷特征,对基本块根据尾指令进行划分与调用,采用广度优先的方式使缺陷路径循环,确定缺陷特征。通过计算基本块的缺陷度分析检测误报率,根据建立的终端软件缺陷检测模型提取出缺陷权限信息,通过数据匹配实现缺陷检测。实验结果表明,对于未知软件,所提方法能够有效提高软件未知缺陷检测命中率,降低软件已知缺陷检测的误报率。At present,the terminal software defect detection method studied has a low hit rate for unknown software defect detection and a high false alarm rate for known software defects. In order to solve the above problems,a new terminal software defect detection method based on association rules is studied. Using binary to extract the defect features of terminal software,the basic block is divided and called according to the tail instruction,and the defect path is cycled in the way of breadth-first to determine the defect features. Analyze the detection false alarm rate by calculating the defect degree of the basic block,extract the defect permission information according to the established terminal software defect detection model,and realize the defect detection through data matching. The experimental results show that the proposed method can effectively improve the hit rate of software unknown defect detection and reduce the false alarm rate of software known defect detection.

关 键 词：关联规则 终端软件 软件缺陷 缺陷检测 

分 类 号：TN311[电子电信—物理电子学]