Research On Dynamic Monitor System Based On The Source Code Of Java

With the rapid development of information technology and the growth of userdemand, Java is widely used in programming. it improved the efficiency of softwaredevelopment, but it brought great challenges for developers to find program vulnerabilities.with the advantages of high accuracy and monitoring in real-time, Dynamic monitoring iswidely used and researched. So it is a great practical significance of studying dynamicmonitoring technology based on the Java source code.Dynamic monitoring is a key technology to get the run-time information. we useinstrumentation to monitor the Java program. First, we use open source tool to do theprocess of lexical analysis and syntax analysis, save the source code information to theprogram intermediate representation and restructure the source code, according to thereconstructed source and intermediate representation of the source code, we implement aprogram instrumentation method based on the statement id, which overcome someproblems of program instrumentation based on the abstract syntax tree, we achieve adynamic monitoring framework based on Java source code and complete the codecoverage statistics based on the method, including statement coverage, branch coverage,loop coverage and multi-condition coverage. we find a way to calculate taint coverage byusing program slicing, and we use taint coverage information to confirm the vulnerabilityof static analysis, which increase the vulnerability accuracy.The experiments show that the dynamic monitoring framework can accomplish thecode coverage statistics, the confirmation of static analysis vulnerability and the newprogram instrumentation method increase the flexibility and scalability, and reduce thetime overhead, The experiment results have achieved the intended purpose.