METHOD AND APPARATUS FOR DETECTING SECURITY VULNERABILITY FOR ANIMATION SOURCE FILE

摘要

A method for detecting a security vulnerability for an animation source file is provided. The method may include: decompiling the animation source file and acquiring a program structure and a syntactic model of the animation source file；converting the program structure and the syntactic model into an abstract syntax tree (AST)；constructing symbol tables and function summaries based on the AST；and performing a taint backtracking on the symbol tables and the function summaries and detecting whether the animation source file has the security vulnerability according to a vulnerability rule. In the method，transfer of external malicious data in a program and generation of the vulnerability can be backtracked，and detection rate for the vulnerability is improved.