SOFTWARE ANALYSIS METHOD BASED ON ABSENCE OF UNDECLARED FUNCTIONALITIES

摘要

FIELD: information security.;SUBSTANCE: in the software analysis method for the absence of undeclared functionality, a separate workstation is pre-allocated for analysis of the analyzed SW, the synchronization of the system time with astronomical time is disabled at the given work station, a time service is simulated on a given workstation, on which a channel for synchronizing time of the environment of operation of the analyzed SW is closed, after which the process of functioning of the analyzed SW is simulated. Based on analysis of information intercepted and stored during simulation, suspicious functional objects are detected, including "logic bomb" type program implants.;EFFECT: high reliability of results of monitoring the absence of undeclared functional capabilities in the software due to detection of program implants such as "logical bomb".;1 cl, 1 dwg