软件与网络安全研究综述

摘要

互联网已经渗入人类社会的各个方面,极大地推动了社会进步与此同时,各种形式的网络犯罪、网络窃密等问题频繁发生,给社会和国家安全带来了极大的危害.网络安全已经成为公众和政府高度关注的重大问题,由于互联网的大量功能和网络上的各种应用都是由软件实现的,软件在网络安全的研究与实践中扮演着至关重要的角色,事实上,几乎所有的网络攻击都是利用系统软件或应用软件中存在的安全缺陷实施的,研究新形势下的软件安全问题日益迫切,从恶意软件、软件漏洞和软件安全机制这3个方面综述了国内外研究现状,进而分析软件生态系统面临的全新安全挑战与发展趋势.%The Internet has penetrated into all aspects of human society and has greatly promoted social progress.At the same time,various forms of cybercrimes and network theft occur frequently,bringing great harm to our society and national security.Cyber security has become a major concern to the public and the government.As a large number of Internet functionalities and applications are implemented by software,software plays a crucial role in cyber security research and practice.In fact,almost all cyberattacks were carried out by exploiting vulnerabilities in system software or application software.It is increasingly urgent to investigate the problems of software security in the new age.This paper reviews the state of the art of malware,software vulnerabilities and software security mechanism,and analyzes the new challenges and trends that the software ecosystem is currently facing.