VULNERABILITY RULE BASED SYSTEM FOR SOFTWARE DEVELOPMENT

摘要

A vulnerability rule based system for developing software is provided to reduce expense with prevention of security accidents by safely developing the software in a source level and shorten software development time by detecting the vulnerability through the system without making a developer develop the software in consideration of each vulnerability. A software structure analyzing module analyzes a structure of the software to obtain correct contents for a vulnerability function before a function related to the vulnerability is searched. A vulnerability detecting module searches the vulnerability of the software by using the generated software structure and a vulnerability rule. An alert module displays the contents for the vulnerability detected by the vulnerability detecting module to a screen. A rule generating module generates and stores the vulnerability rule to correctly discriminate the vulnerability not simple pattern matching of the vulnerability function. The rule generating module applies a rule generating module according to diverse vulnerability.