Research On Static Detection Of Java Program Based On Control Flow Analysis And Data Flow Analysis

With development of the Internet industry, people's life benefits a lot; the growing requirement for computers, has been stimulating the software industry continues to progress. The increasement of Software requirements and the diversity of demand patterns, prompting software developers with new development direction and angle to meet the needs of users. Java language as a representative of the programming language, with versatility, efficiency, and safety of cross-platform type of unique advantages, occupy the major market share in application development language. With the increasing scale of software development and the improving the code complexity, the difficulty of software security testing along with the increase. Therefore, the research on static detection technology based Java programs has important practical significance.Static detection program is based on the implementation of logic programs, in accordance with the execution of the program for the implementation of the results of the program are analyzed, in the course of the analysis that can accurately locate bugs node position to provide effective support for the modification work late. Existing static detection of Java source code have two important indicator in the analysis of efficiency and accuracy of the results of the analysis needs to be improved, Our research based on control flow analysis and data flow analysis method, proposed a new detection system in these two areas than in the past detection methods have a more significant improvement.The main research work of this paper are: first, control flow analysis on Java source code based on control flow analysis framework and generate process control flow graph, second, combining theoretical study IFDS problem, abstract a Java program analysis problems to an IFDS problem, third, according to the IFDS problem, define IFDS problem solver interface class and interface class performance function, one of the most important features function as a data stream function, data stream function defines the different types of traffic, and according to the procedure performed logic, determine the type of the current statement, according to the type of the current statement, select the data stream function corresponding to the type of program for data flow analysis, output the results of the analysis.Through experimental test of the system, indicating that the program integrity analysis can be done based on control flow analysis and data flow analysis of the Java source code static detection frame, and analysis procedures for vulnerability analysis of the exact result is higher than the general average standard static program value, to achieve the desired design goals and requirements.