搜索
1学年论文（文献检索及专业写作常识2015-2016第二学期）题目：软件安全漏洞检测作者：熊文丽所在学院：信息科学与工程学院专业年级：信息安全14-1指导教师：张琳琳职称：副教授2016年5月25日软件安全漏洞检测2摘要互联网的全球性普及和发展，使得计算机网络与人们的生活紧密相关，信息安全逐渐成为信息技术的核心问题，软件漏洞检测是信息安全的重要组成部分，漏洞带来的危害日益严重，恶意攻击者可以利用软件漏洞来访问未授权的资源，导致敏感数据被破坏，甚至威胁到整个信息安全系统。计算机软件安全漏洞，计算机系统的一组特性，这些特性一旦被某些恶意的主体利用，通过已授权的手段，来获取对计算机资源的未授权访问，或者通过其他办法对计算机的系统造成损害。首先定义了软件漏洞和软件漏洞分析技术，在此基础上，提出了软件漏洞分析技术体系，并对现有技术进行了分类和对比，归纳出了该领域的科学问题、技术难题和工程问题，最后展望了软件漏洞分析技术的未来发展。关键词：软件安全，漏洞检测，信息安全软件安全漏洞检测3ABSTRACTGlobalpopularityanddevelopmentoftheInternetsothatthecomputernetworkiscloselyrelatedtopeople'slives,informationsecurityhasgraduallybecomethecoreofinformationtechnology,software,informationsecurityvulnerabilitydetectionisanimportantpartofthegrowingvulnerabilityharm,maliciousattackersYoucantakeadvantageofsoftwarevulnerabilitiestoaccessunauthorizedresources,resultingindestructionofsensitivedata,evenathreattotheentireinformationsecuritysystem.Asetofcharacteristicsofcomputersoftwaresecurityvulnerabilityofcomputersystems,thesefeaturesonceexploitedbysomemaliciousbodythroughauthorizedmeanstogainunauthorizedaccesstocomputerresources,orthroughothermeanscausedamagetocomputersystems.First,thedefinitionofsoftwarevulnerabilitiesandvulnerabilityanalysissoftwaretechnology,onthisbasis,theproposedsoftwarevulnerabilityanalysistechnologysystem,andthepriorartareclassifiedandcontrast,sumsuptheprobleminthefieldofscientific,technicalproblemsandengineeringproblems,Finally,theprospectoffuturedevelopmentofthesoftwarevulnerabilityanalysistechnology.Keywords:softwaresecurity;vulnerabilitydetection;informationsecurity软件安全漏洞检测4目录1绪论..............................................................................................................................................51.1背景...................................................................................................................................51.2国内外研究现状................................................................................................................52软件安全漏洞概述.......................................................................................................................72.1漏洞的定义........................................................................................................................72.2计算机软件所面临的主要安全威胁...............................................................................82.3漏洞的分类.......................................................................................................................82.4漏洞的特征.......................................................................................................................92.5常见的计算机软件安全漏洞...........................................................................................92.6软件安全漏洞产生的原因.............................................................................................103软件安全漏洞检测方法.............................................................................................................123.1静态分析..........................................................................................................................123.2动态检测..........................................................................................................................143.3混合检测技术.................................................................................................................154软件漏洞分析技术.....................................................................................................................174.1漏洞分析技术分类..........................................................................................................174.2软件架构分析..................................................................................................................174.3代码静态分析..................................................................................................................194.4代码动态分析.................................................................................................................214.5动静结合分析.................................................................................................................224.6漏洞定位..........................................................................................................................225软件漏洞分析中的关键性问题.................................................................................................245.1科学问题.........................................................................................................................245.2技术难题..........................................................................................................................255.3工程问题..........................................................................................................................256计算机软件漏洞检测技术的实践应用.....................................................................................267总结与未来展望.........................................................................................................................27致谢..........................................................................