基于靜態(tài)分析的異常檢測研究.pdf

1、大連理工大學(xué)碩士學(xué)位論文基于靜態(tài)分析的異常檢測研究姓名：華景煜申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：軟件工程指導(dǎo)教師：李明楚20090629基予靜態(tài)分折酶異鬻檢測研究ResearchonAnomalyDetectionBasedonStaticAnalysisAbstract飄飛enaprogramisattackeditwillbehaveinamamlerinconsistentwithitsbinarycode。whichcallbemadeu

2、seoftoperformanomalydetection：Firstlydoastaticanalysisofthebinarycodetoconstructamodeloftheprogrambehaviorandthendifferemkindsofattacks淞bedetectedbymonitoringwhethertheexecutionofthisprogramdeviatesfromthismodel。，nlesemo

3、delsusuallysharethehighlydesirablefeaturethattheydonotproducefalsealarmsbuttheyfacetheconflictbetweenprecisionande筒eieney：弧ellighprecisionofthemodelssuchastheVPStaticisatthecostofhighspaceandtimecomplexitiesInthisthesisw

4、eproposeanewcomextsensitiveanomalydetectionmodelbaSedonstaticbinaryanalysis：STTThiSmodelusesstackwalkstoeliminateIlOlldeterminabilityandiSaprovablyDPD_AwhichissimilartotheVPSta矗cS，rTmodelreplacestheautomatonintheVpStatic

5、withastatetransitiontableandallredundantstatesandcorrespondingtransitionsaleeliminatedasaresultthemodeliscompactedgreatlyAccordingtoouranalysis，bothtimeandspacecomplexitiesoftheSTTarereducedcomparedwiththeVPStaticinparti

6、cularinourexperimentsthememo秘overheadsoftheSTrmodelsforthetwoLinux’Sselfcontainedprograms@pandcat)alelessthanhalfoftheVPStatics‘S程isalsoprovedthatit幻婦thesameprecisionwiththevPS詛ticThereby，theefficiencyoftheVPS伽ciSgreatly

7、improvedwithoutreducingitsprecisionwhichalleviatesthehistoricalconflictbetweenthee釜eieney，andprecisionAttheendaunifiedformaldefinitionsharedbvallstaticallyconstructedsoftwareanomalydetectionmodelsispresentedbasedonAbstra

8、ctInterpretationTheoryInthisdefinitionprogrambehaviorsmodeledbydifferentmodelsareconsideredasapproximationsofpartialtracesemanticsatdifferentabstractionlevelsAsexamples，abg觚嘶onfunctionscorrespondingtoseveralclaSsicmodels