REAL-TIME DETECTION SYSTEM AND METHOD BASED RULE FOR SAFETY SOFTWARE DEVELOPMENT

摘要

A rule-based real-time detecting system for safe software development and a method thereof are provided to solve a problem generating security accidents caused from vulnerability and develop software safe in a source code level by generating the rule from the vulnerability generated from the software development and detecting the vulnerability from the software with the rule in real-time. An analyzing module(100) analyzes contents of a currently inputted source by analyzing a value inputted from a programmer. A checker module(200) compares the source with the rule inputted from a rule loader module(300) to check whether the analyzed contents are the source code having buffer overflow vulnerability. A highlighter module(400) displays a part of the source code having the buffer overflow vulnerability. An alerter module(500) loads the contents and resolutions for the vulnerability from a resolution loader module(600), and outputs the loaded contents/resolutions to a screen as a message box in case that the source is discriminated as the source having the buffer overflow vulnerability. The ruler loader module defines the rule for the part having the buffer overflow vulnerability.