A Vulnerability Static Detection Method Based on Flow Analysis

The main problem of existing static vulnerability detection methods based on source code analysis is their high false positive and false negative, the main reason is lack of legally check to these data used in the program. Variable as an important component of the program, its validation is particularly important, This paper proposes a new static detection model to variables, this model combines the mature static analysis technology, and borrows the idea of data flow and control flow analysis technique in compiler, it can get contextual information, provide more accurate analysis method to the use of variables in the program.