Static Analysis of Vulnerability Based on Dataflow
Zhang Lu-feng
Abstract
Zhang Lu-feng
Abstract
In order to improve the security of Java software,this paper suggests a dataflow based taint analysis method to solve the problem of vulnerability analysis related to Java programs.The idea of the dataflow based taint analysis method is introduced and the process of taint analysis method is presented.Analysis system built according to the method can effectively find the vulnerabilities in Java ByteCode programs,such as XPath injection,SQL injection,etc.Results verify the correctness and validity of the method.
OpenAlex reports 1 citations for this work. Citation counts describe recorded attention and do not establish research quality.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
In order to improve the security of Java software,this paper suggests a dataflow based taint analysis method to solve the problem of vulnerability analysis related to Java programs.The idea of the dataflow based taint analysis method is introduced and the process of taint analysis method is presented.Analysis system built according to the method can effectively find the vulnerabilities in Java ByteCode programs,such as XPath injection,SQL injection,etc.Results verify the correctness and validity of the method.
Key concepts: Computer science, Dataflow, Bytecode, Java bytecode, Correctness, Java, Programming language, SQL injection