Verfahren und Vorrichtung zur Symbolischen Analyse eines Softwareprogramms

Details

Veröffentlichungs-Nr.

EP3872663

Aktenzeichen

EP20160281

Anmeldetag

28. Februar 2020

Veröffentlichung

8. Mai 2024

Erteilung

8. Mai 2024

Rechtsraum

EP

IPC

G06F21/56G06F21/57G06F8/75

Abstract

A method (100) for symbolic analysis of a software program is described. The method comprises constructing (110) a control flow graph, CFG, for a software program procedure, the CFG comprising nodes representing basic blocks reachable within the software program procedure, the basic blocks represented as respective functions from a first machine state on entry to a said basic block to a second machine state on exit from that basic block. The method further describes simplifying (112) the CFG to a single node representing the software program procedure as a function from an input machine state on entry to the software program procedure to an output machine state on exit from the software program procedure, comparing (114) said function to a rule set identifying vulnerabilities based on effects on the machine state; and determining (116) a vulnerability within the software program procedure based on the comparing.

Anmelder

Firma

BlackBerry Limited

Land

🇨🇦 Kanada

Fachgebiete