关键词: 关键词： 软件脆弱性, 程序切片, 程序谱, 脆弱性定位

Abstract: Abstract：In order to meet the requirements of high reliability that is required by many embedded software in aerospace field, a method is designed to analyze and localize the software vulnerability automatically. Based on program slicing technique and improved forward computation algorithm of dynamic slicing, firstly this method collects the program dynamic information at runtime via using dynamic slicing; and then it constructs the program slice spectrum and calculates the likelihood of each slicing statement being vulnerable by some statistics; and last it reports the localization result of software vulnerability. After discovering the vulnerability in the software, this method can analyze and localize the root that causes this vulnerability. We develop a tool to test this method and the experiment proves its effectiveness.  

Key words: Keywords：software vulnerability, program slice, program spectrum, vulnerability localization