Dirty data propagation path finding method based on complex network
Abstract
The invention claims a based on the complex network the dirty data transmission path discovery method, and is not with a binary system program and perform of providing sound code, and result perform to process obtained, unearths the taxi for information. The first steps: Double-state to perform file and counter-, and obtained a voice interlanguage, by a simple and a program perform testing object, obtained interlanguage, codethe second step: Capture calling function, the function and an resolution is a function name, and perform processing and simple, and a matrix; the formatLast generating function calling relational pattern; Third steps: Analytic calling function relational pattern, obtained joint, side, the weight information, the computing obtained joint, is provided with a key node the complex network, mapThe fourth steps: According to the complex network regulation power speed distribution's a inhomogeneous, finding with the building according to position information and invoking high frequency of.
Term
7.3 yearsto projected expiry
Projected expiry 31 December 2033, counted from filing; an application has no term until it is granted.
- Priority and filed
- Published
- Today
- Projected expiry
2 claims: 2 independent, 0 dependent
- 1一种基于复杂网络的脏数据传播路径发现方法,其特征在于,包括如下步骤:第一步:使用IDA的插件Hex-Rays对二进制文件进行反编译,得到类似C语言的中间代码; 第二步:使用GNU编译器提供的工具对第一步生成的中间代码进行数据搜集,捕获函数调用路径,在得到路径后,使用Addr21ine将函数地址解析为函数名,之后对跟踪数据进行处理和精简,并生成矩阵格式;最后使用Graphviz生成函数调用关系图; 第三步:解析上一步骤得到的函数调用关系图,得到节点、边、权重信息,并且计算得到节点度,建立带关键节点的复杂网络图; 第四步:根据复杂网络图的幂率分布的非均匀特性,结合上一步生成的复杂网络图,找出与构造脏数据相关的点以及调用频率高的点,关键节点用不同的颜色进行标注,脏数据的路径用特殊的颜色标出,从而发现软件缺陷隐患。
- 2如权利要求1所述的一种基于复杂网络的脏数据传播路径发现方法,其特征在于,第三步建立复杂网络图采用以下方法,具体步骤如下:(1)将第二步获得的二进制文件所有函数作为网络中的节点; (2)根据节点间是否有关系建立无权网络图; (3)计算节点间的相关度; (4)根据相关度计算权值; (5)建立加权网络图。
Independent claims2
49 paragraphs, as filed
A complex network is based dirty data transmission path discovery method
technical field
[0001] The invention relates to a based on the complex network the dirty data transmission path discovery method, belonging to software safety technical field.
background technology
[0002] The complex network based of the researching 宄 the method, the multiple concepts and method can the used for reflecting network related to statistical characteristics, important with the node distribution. The software network, the expandable the is a software of the time of the screen. The invention, visually intercom, comprising a device and a been of the time of signal, and importance wherein the periphery. , And software network is the bottom with generally to the network, solely in a to position of the importance of type weight is inaccurate. For example, a flow a special function, a itself wherein are; if it to remove of the software wherein possibly directly to make the software a structure capable of being.
[0003] Is 宄 to knows non-inductive scale network for researching generally the node generating defect's is provided with two colours: A is any design defects, are software network with one part of said with the design defects; and part of nodes' function defect is an and normal work are arranged in the software; , Second importance on design defects, namely the software network the node importance lighter and node with the design defects. The software network, and a result of the distributed presenting power speed distribution's a inhomogeneous, wherein an of the node is very been high of the time of call, wherein internal sides of the software network of the number less than 5%; assembly for software of the main function. The invention, which the function of preventing defect, might surface of the breakdown system. For the; if software test process to be at the nodes of the software development initial side and with emphasis, and invention the shorten software development test side, wherein is made of mass software improve. The invention, how head, and accurately found work according important the nodes is presently of.
[0004] Predecessors perform counter- and related to researching the base of IDA counter- assembly 宄, wherein itself providing rich counter- assembly result information and data is define, therefore interlanguage is a is needed to look to symbol performing an analogue assembly semantic meaning the performing, unreadable and image to the SSL perform is whole lighter and a complicated for describing system. The interlanguage in the invention, mainly according to the directivity meaning semantic and IDA counter- assembly result information, wherein a point are simple indication semantic meaning rendering dictionary, a corresponding lookup matching, and device for language to convert interlanguage. The content of the main referring to a: Interlanguage, connecting interlanguage semantic meaning dictionary rendering, a wireless of specifcially for.
[0005] Existing according to discovery technology comprehensive insufficient, without the device is a method for software penetrate the whole process. The invention, which the function of preventing defect, might surface of the breakdown system. For the; if software test process to be at the nodes of the software development initial side and with emphasis, and invention the shorten software development test side, wherein is made of mass software improve. The invention, how head, and accurately found work according important the nodes is presently of. Method and discovered for dirty data transmission technology device based on source code, and a support discovery of double-state system program.
invention content
[0006] The invention claims a based on the complex network the dirty data transmission path discovery method, and is not with a binary system program and perform of providing sound code, and result perform to process obtained, unearths the taxi for information, hoping of the discovery defect in the software operation and reliability of improve software.
[0007] Is the invention's technical solution of the following:
[0008] A complex network is based dirty data transmission path discovery method, comprising the following steps:
[0009] The first steps: The IDA plug-in plate Hex-Rays a moving to the binary file perform, obtained similar a voice; interlanguage
[0010] the second step: Using GNU compiler providing's tool to the first outer interlanguage perform data collection, the capture calling function light, the obtained the light, a Addr21ine function and an resolution is a function name, then tracking to perform data process and simple, and a matrix; the formatLast is Graphviz generating function calling relational pattern;
[0011] Third steps: For step obtained the calling function relational pattern, obtained the node, side, the weight information, and computing obtained joint, is provided with a key node the complex network, map
[0012] The fourth steps: According to the complex network regulation power speed distribution's a inhomogeneous, wherein with a outer complex network graph, finding with the building according to position information and invoking frequency very upper part, the intrinsic node with different colours perform labelling, a data according track interstage for with the special colour, so discovery software defect hidden danger.
[0013] The third further arranged and network chart by the method, the specified one of the following:
[0014] ()) by double-state file of functions of the second collecting the node in a network;
[0015] (2) For with relational provided with the the network chart between the nodes;
[0016] (3) Is degree of correlation between computing nodes;
[0017] (4) According to one of correlation a weight,
[0018] (5) Is arranged weighing network graph.
[0019] Beneficial effects of the present invention:
[0020] The invention based on assembly counter- tool IDA perform researching 宄, a keyboard and the binary system program and perform of providing sound code, and result perform to process obtained, unearths the taxi for information. The hoping of discovery defect in the software operation and reliability of improve software.
[0021] Industrial key point the analyzing target for binary file, and non-inductive source code, therefore the side preparation which the binary code cell is source code similar format. The; the type topic innovation of the complex the network analysis for software calling function of the relation drastically, the degree discovery of beneficial for software defect.
Brief composed fo the drawings
[0022] Digital 1 is the invention a based on the complex network the dirty data transmission path discovery method for flow chart;
[0023] Digital 2 is process chart of the present invention collecting, and communicate tracking visible light;
[0024] Digital 3 are embodiment of the invention the application program calling function result drawing leds.
Specifcially a groove
[0025] The is a compromised detail to the invention perform the light of the digital.
[0026] Embodiment of the invention negative blocking three parts: First, the binary file perform counter-, and sound code according obtained of process or the analysable interlanguage, the part of the IDA plug-in plate Hex-Rays in; , Second to the counter- and result perform analysis, and function invoking relational pattern, the part of the GNU compiler tool chains and Addrfline tool, fixed with the Graphviz tool; allThird, a relational the generate a key comprises and network graph, wherein the graph theory and complex for network, finding of according to the light propagation of.
[0027] The light of digital 1 work current of detailed rendering invention:
[0028] 1. Counter- and
[0029] The compression multiple counter- and tool, the invention switch is IDA plug-in plate Hex-Rays, a binary file perform and counter-, and obtained similar a voice interlanguage.
[0030] 2. Each calling function relational pattern
[0031] For capturing and displaying the function invoking graph, which 4 clearance element: GNU compiler tool and Addr21ine tool, wherein the obtained interlanguage and Graphviz tool. The Addr21ine tool of the recognizing function, point the address the source code the number and executing reflection. Interlanguage for with images is very simple tool, comprising a reduce's address preventing to the pattern standard, matter be made to process the code of counter- and. The Graphviz tool of the image generating reflection. The fully step shown as a digital 2.
[0032] A first GNU compiler providing tool to the first outer interlanguage perform data collection, capture function signal light. The obtained light, a Addr21ine function and an resolution is function name. Then tracking to perform data process and simple, and a matrix format. Last is Graphviz generating function calling relational pattern.
[0033] 3. Finding of dirty data transmission path
[0034] The according to is a data is scheduled of the revising, it does not with the memory or - processing. Data or itself value output. Can be connected with the building according and data recorded wherein the information obtained wherein the propagation, wherein the network and program for clustering similar obtained type of the achieve device.
[0035] First step for the obtained a file, obtained the node, side surface; the weight of the information, and computing obtained node and a on.
[0036] The complex network is a software system, the specified step is:
[0037] ()) by double-state file of functions of the second collecting the node in a network;
[0038] (2) For with relational provided with the the network chart between the nodes;
[0039] (3) Is degree of correlation between computing nodes;
[0040] (4) According to one of correlation a weight,
[0041] (5) Is arranged weighing network graph.
[0042] According to complex network power speed distribution's a inhomogeneous, wherein with a outer complex network model, finding with the building according to position information and invoking frequency very upper part, the intrinsic node with different colours perform labelling, a data according track interstage for with the special colour, so discovery software defect hidden danger.
[0043] Although combining the digital describing the specifcially a groove of the present invention, and is the technical field person, and are separated from the invention of the lower side, further - can be multiple deformations replacing, and improved; the is the vision and belonging to the invention protection range of protecting.
Every citation, both ways
| Document | Relation | Office | Category | Cited during | Relevant claims |
|---|---|---|---|---|---|
| CN105068928A | Cited by | China | – | Search report | – |
| CN104932865A | Cited by | China | – | Search report | – |
| CN114748875A | Cited by | China | – | Search report | – |
| CN114003274A | Cited by | China | – | Search report | – |
| CN101140588A | Cites | China | A | Search report | 1-2 |
| CN101330417A | Cites | China | A | Search report | 1-2 |
| CN102841844A | Cites | China | Y | Search report | 1-2 |
| CN103200096A | Cites | China | Y | Search report | 1-2 |
| US7434046B1 | Cites | United States of America | A | Search report | 1-2 |
2 members in 1 office
Priority claims2
| Document | Office | Kind | Date |
|---|---|---|---|
| 201310750367 | China | A | |
| CN20131750367 | – | – | – |
Members2
| Document | Office | Kind | |
|---|---|---|---|
| CN104731705AThis record | China | A | |
| CN104731705B | China | B |
4 legal events, as the office reported them to INPADOC
Over the term
Point at a mark for the eventEvents
| Event | Code | |
|---|---|---|
| Termination of patent right due to non-payment of annual feeCF01 | CF01 | |
| Patent grantGrantedGR01 | GR01 | |
| Entry into substantive examinationC10 | C10 | |
| PublicationC06 | C06 |
Numbers
- Publication
- 104731705
- Publication, DOCDB
- 104731705
- Publication, EPODOC
- CN104731705
- Application
- 107503670
- Application, DOCDB
- 201310750367
- Application, EPODOC
- CN20131750367
Titles3
- Chinese
- 一种基于复杂网络的脏数据传播路径发现方法
- English
- Dirty data propagation path finding method based on complex network
- English
- A complex network is based dirty data transmission path discovery method
Classification
- IPC, 1
- G06F11 36