电子学报 ›› 2014, Vol. 42 ›› Issue (11): 2168-2173.DOI: 10.3969/j.issn.0372-2112.2014.11.007

• 学术论文 • 上一篇    下一篇

基于动态协同双向映射的相似执行路径生成方法

郭曦1, 王盼2,3   

  1. 1. 华中农业大学信息学院计算机科学系, 湖北武汉 430070;
    2. 武汉电力职业技术学院, 湖北武汉 430079;
    3. 武汉大学电气工程学院, 湖北武汉 430072
  • 收稿日期:2014-02-10 修回日期:2014-03-14 出版日期:2014-11-25 发布日期:2014-11-25
  • 通讯作者: 郭曦
  • 作者简介:王盼 女,1987年出生于河南,硕士,武汉电力职业技术学院讲师,武汉大学电气工程学院博士生.主要研究方向:电力电子功率变换、新能源等. E-mail:wangpan6712063@163.com
  • 基金资助:

    国家自然科学基金(No.61103220,No.91118003);湖北省自然科学基金(No.2014CFB144)中央高校基本科研业务费专项资金(No.0900206154);武汉大学搏士短期出国(境)研修专项经费

A Technique of Similar Execution Paths Generation Based on Dynamic Synergy Bidirectional Mapping

GUO Xi1, WANG Pan2,3   

  1. 1. Department of Computer Science, College of Informatics, Huazhong Agriculture University, Wuhan, Hubei 430070, China;
    2. Wuhan Electric Power Technical College, Wuhan, Hubei 430079, China;
    3. School of Electrical Engineering, Wuhan University, Wuhan, Hubei, 430072, China
  • Received:2014-02-10 Revised:2014-03-14 Online:2014-11-25 Published:2014-11-25

摘要:

相似执行路径的生成是代码分析和检测的基础性工作之一,现有的方法通常以程序的行为序列或结构为分析对象,通过改变关键谓词的取值等方法来进行分析,但由于缺乏必要的引导信息导致生成的相似路径的有效性较低,另外由于路径的谓词集合较长而难以求解也降低了分析的精度.提出基于动态协同双向映射的分析方法,通过对程序控制流图的表示形式进行扩展,结合后向符号分析的方法生成候选路径的最弱前置条件,并以此为引导信息使用编辑距离的方法通过改变距离因子的取值来生成有针对性的相似路径集合.实验结果表明,与现有的方法相比,该方法的准确性和效率有明显的优势.

关键词: 静态分析, 控制流图, 最弱前置条件, 相似执行路径

Abstract:

Similar execution paths generation is one of the fundamental tasks in code analysis and detection.The current methods usually target to the program behavior or program structure,and change the value of key predicates,but these methods has a low effectiveness due to the lack of the necessary guidance information,Meanwhile,the predicates set has a large size and usually hard to solve,thus it will reduce the analyze precision as well.A technique of similar execution paths generation based on dynamic synergy bidirectional mapping is proposed in this paper.According to extend the shape of Control Flow Graph and use the backward symbolic analysis,the weakest precondition of the candidate path is generated,which can be used as the guidance information to generate pointed similar execution paths set according to the edit distance via changing the distance factor.The experimental results show that this method has the advantage of precision and anti-inference.

Key words: static analysis, control flow graph, weakest precondition, similar execution path

中图分类号: