FIELD: computing technology.
SUBSTANCE: invention relates to the field of computer technology for analysing executable binary files and source code using fuzzy logic. The technical result is achieved by means of a system containing a decompiler configured to receive the source code of the input program and present the input program in an intermediate representation (IR) of the target code in a low-level code (LLC), as well as a front end configured to retrieve the representation of the binary code of the input program and present the input program as target LLC IR. The system additionally includes an analyser configured to receive the target LLC IR and analyse the target LLC IR in order to detect vulnerabilities, undocumented functions, and errors of the input program using the predefined rules stored in the module of rules and transmitted to the analyser. The analyser utilises a fuzzy logic mechanism in order to come to substantially more accurate results.
EFFECT: reduce the number of false positive and false negative results and provides functions for eliminating the detected vulnerabilities and errors.
14 cl, 6 dwg, 3 tbl
Title | Year | Author | Number |
---|---|---|---|
METHOD AND SYSTEM FOR VALIDATION OF FUNCTIONING OF PROPRIETARY COMPLEX-FUNCTIONAL UNITS PLACED IN PROTECTED DATA STORAGES | 2023 |
|
RU2817121C1 |
AUTOMATED SAFETY ASSESSMENT OF BUSINESS-CRITICAL COMPUTER SYSTEMS AND RESOURCES | 2011 |
|
RU2657170C2 |
METHOD AND SYSTEM FOR ELIMINATING VULNERABILITIES IN PROGRAM CODE | 2023 |
|
RU2821220C1 |
METHOD AND SYSTEM FOR DETERMINING SOFTWARE BELONGING BY ITS SOURCE CODE | 2019 |
|
RU2728498C1 |
SYSTEM AND METHOD OF ASSESSMENT OF HARMFULLNESS OF CODE EXECUTED IN ADDRESSING SPACE OF CONFIDENTIAL PROCESS | 2013 |
|
RU2531861C1 |
METHOD AND SYSTEM FOR MODIFYING PROGRAM CODE | 2023 |
|
RU2824522C1 |
METHOD FOR CONVERTING INPUT CODE OF TRANSLATOR INTO OBJECT CODE AND DEVICE WHICH IMPLEMENTS SAID METHOD | 1995 |
|
RU2103727C1 |
METHOD AND SYSTEM FOR IDENTIFYING EXPLOITED VULNERABILITIES IN THE PROGRAM CODE | 2022 |
|
RU2790005C1 |
METHOD OF THE SOFTWARE VERIFICATION BY THE SOFTWARE SOURCE CODE IDENTIFIERS NATURAL SEMANTICS IN STATIC ANALYSIS | 2018 |
|
RU2672786C1 |
SYSTEM AND METHOD FOR AUTOMATIC INVESTIGATION OF SAFETY INCIDENTS | 2011 |
|
RU2481633C2 |
Authors
Dates
2022-11-09—Published
2021-12-03—Filed