一种基于指针逻辑的代码安全属性分析方法.pdfVIP

第 32 ~给第 6 期 计算机学报 Vo l. 32 No. 6 2009 年 6 月 CHINESE JOURNAL OF COMPUTERS June 2009 一种基于指针逻辑的代码安全属性分析方法 程亮2) 张阳1) 口{中间科学院软件研究所 北京 100190) 2) (中闰科学技术大学电子工程与信息科学系 合肥 23002 7) 摘 要 在分析和总结前人工作的基础上，提出了一种改进的代码安全属性验证方法.该方法在利用传统的源代 码安全属性验证工具的葱础上.加入了指针逻辑，针对现有代隅属性分析技术只能对 C 语商子集进行分析验证的 不足，利用指针逻辑对源代码的分析结果对源代码中的指针进行替换，从而避开了传统静态代码属性验证工具对 指针处理功能太弱的瓶颈，可以实现对 C 语言中的部分指针及运算进行处理. 关键词 操作系统安全$形式化验证p 代码分析:模型检测:指针逻辄 中回法分类号 TP309 001 号: 10. 3724/SP.J. 1016.2009.01119 A New Property Verificatioo Method for Code Security Based 00 Poioter Logic ZHANG Yangll CHENG Liang2l 1) (Institute of Softu.昭re ， ChìneseAcademy of Sciences. Beijíng 100190) 盯 (Ðepartment of Electronic Engineering and lnformation Science , University of Science αnd Technology of China , Hefeí 23002 7 Abstract Thís paper proposes an improved verifícation method for code security property on the basis of the study of predecessors work. According to the situation that current code property verification can only deal wíth a subset of C programming language , this paper introduces the pointer logic , whose result can be used by the replacement algorithm to substitute all the pointers in the source code , to the conventional code 日ecuríty property verification tools. The proposed ap- proach avoids the weakness of pointer processing in the traditional static code property verification , and therefore can handle pointers in C programming language when property verification partially. Keywords operating system security; formal verification; code analysis; model checking; pointer logi