Software-Security-Project

Design code of software security course, School of Computer science, Huazhong University of Science and Technology

String Matching

File Name: string.cpp

Function: Homology detection using string matching
Principle: Analyze the copy ratio between samples by comparing and matching valid code strings
Data: In "同源性检测样本库.zip"
Input:

In_name_1: Source file1 to test

Out_name_1: Source file1 after preprocessing

In_name_2: Source file2 for homology detection with file1

Out_name_2: Source file2 after preprocessing

CFG

File Name: CFG.cpp

Function: The control flow chart CFG was used to detect source code homology
Principle: By extracting the call diagram of the code, the similarity of each function call diagram among the samples is detected and the probability of similarity is obtained.
Input:

In_name_1: Source file1 to test

Out_name_1: Source file1 after preprocessing

In_name_2: Source file2 for homology detection with file1

Out_name_2: Source file2 after preprocessing

Stack buffer detection

File Name: stack overflow.cpp

Function: Stack buffer overflow detection
Principle: According to the principle of stack buffer, the overflow problem of allocated stack data area is analyzed, and the number of suspicious lines and columns is given.
Data: In "漏洞检测样本库.zip"

Heap buffer detection

File Name: heap overflow.cpp

Function: Heap buffer overflow detection
Principle: According to the principle of heap buffer, the overflow problem of allocated heap data area is analyzed, and the number of suspicious lines and columns is given.
Data: In "漏洞检测样本库.zip"

Integer width overflow detection

File Name: Integer width overflow.cpp

Function: Integer width overflow detection
According to the principle of integer width overflow, the overflow problem of allocated data is analyzed, and the number of suspicious lines and columns is given.
Data: In "漏洞检测样本库.zip"

Integer arithmetic overflow detection

File Name: integer arithmetic overflow.cpp

Function: Integer arithmetic overflow detection
Principle: According to the overflow principle of integer operation, the overflow problem of allocated data is analyzed, and the number of suspicious lines and columns is given.
Data: In "漏洞检测样本库.zip"

CFG Test

Function: A test procedure for homology detection based on CFG graph
Input:

In_name_1: Source file1 to test

Out_name_1: Source file1 after preprocessing
Output:

CFG figure

the similarity

Leak Detection

Function: The test program of stack overflow vulnerability detection is realized by using vulnerability sample library
Input:

In_name_1: Source file1 to test

Out_name_1: Source file1 after preprocessing
Output: Where the program is likely to overflow