COMPARING SOURCE AND SINK VALUES IN SECURITY ANALYSIS

摘要

Techniques for determining differences between source and sink values are described herein. The techniques may include identifying a data-flow source statement within a computer program, and recording a value read at the source statement. The techniques may include identifying a sink of the data flow, and record a value flowing into the sink. The source value may be compared to the sink value to determine whether a potential security leak exists.

主权项

1. A method, comprising:
identifying, by one or more computer processors, a data-flow source statement within a computer program; recording a value read at the source statement; identifying, by one or more computer processors, a sink of the data flow; recording a value flowing into the sink; and comparing, by one or more computer processors, the source value to the sink value to determine whether a potential security leak exists.