The Design And Implementation Of A Static Analysis System In Source Code

With the development of computer application, more security problems will be faced with and the main reason is the security risk in software. How to build a new system to analyze source code security is one of the most important tasks.Based on the source code security analysis technology, a new software source code security examination model is researched.The following is main results in this thesis:1) Analyze the popular source code security analysis technology and put forward some weakness in them, bring out the importance of context.2) Introduce the classification of source code risk and some popular risks will be discussed in detail, take out the process of source code security analyze.3) Based on the control flow and data flow technology, a new software source code security examination model is researched. It will be applied in a system which will start with source code to analyze the key structure and character of program and report security problem for users.