Directed execution of dynamic programs in isolated environments

摘要

A test object that includes at least one computer program that includes dynamic executable code is obtained. The at least one computer program is transformed into a format that is configured to execute in a hosted isolated computing environment. Directed execution of the at least one computer program is initiated, in the hosted isolated computing environment. Dynamic code vulnerabilities of the at least one computer program are detected, based on the directed execution.

主权项

1. A system comprising:
a device that includes at least one processor, the device including a dynamic program validation engine comprising instructions stored on a computer readable storage medium for execution by the at least one processor, the dynamic program validation engine including:
an object acquisition component that obtains a test object that includes dynamic executable code;an object transformation component that transforms at least a portion of the test object into a transformed format test object that is configured to execute in a hosted isolated computing environment, the transforming the at least a portion of the test object including replacing item names of referenced content items with local reference names of items that are stored locally, after download from one or more referenced sources that are external to the hosted isolated computing environment;a directed execution component that initiates directed execution of the transformed format test object, in the hosted isolated computing environment; anda vulnerability detection component that detects dynamic code vulnerabilities of the test object, based on the directed execution.