面向C/C++代码的漏洞检测系统原理与实现

摘要

目前,许多高性能的系统程序或应用程序,都是采用C/C++语言实现的,保障这些程序的安全是构造安全主机(或网络)环境的重要前提.面向C/C++代码的漏洞检测系统旨在程序运行之前发现源程序潜在的安全漏洞,降低出现安全漏洞的概率,对提高程序的安全性具有重要意义.首先介绍系统设计原理和设计流程;然后详细说明各模块的设计和实现过程;最后对实验结果进行分析.%At present,many system programs or applications with high-performance are implemented using C/C ++. To ensure the security of these applications is the most important precondition for building an environment of safe hosts (or networks). C/C + + code-oriented vulnerability scanning system aims at finding latent vulnerabilities of the source programs before them running and reducing the probability of vulnerabilities occurrence, therefore it has significant meaning to improving the security of programs. In this paper we introduce the theory and process of system design firstly,then we explicate the contriving and realisation process of each module. Finally,we analyse the test result.