APPLICATION ANALYSIS DEVICE AND PROGRAM

摘要

PROBLEM TO BE SOLVED: To provide an application analysis device and program capable of estimating a potential threat in an application which uses a script in an external server.

SOLUTION: A decompilation part 2 decompiles an execution code of an application of an evaluation object and acquires a source code corresponding to the execution code. A setting determination part 3 determines whether or not information about setting to acquire a script described in a script language from an external server is included in the source code. A method specification part 4 specifies a method called by executing the script based on the source code when it is determined that the information is included in the source code. A threat estimation part 6 compares information included in a part in which the specified method is described in the source code with API information showing an API available during development of the application.

COPYRIGHT: (C)2013,JPO&INPIT