Static Analysis of Vulnerability Based on Dataflow
Zhang Lu-feng · Jisuanji gongcheng · 2008
In order to improve the security of Java software,this paper suggests a dataflow based taint analysis method to solve the problem of vulnerability analysis related to Java programs.The idea of the dataflow based taint analysis method is introduced and the process of taint analysis method is presented.Analysis system built according to the method can effectively find the vulnerabilities in Java ByteCode programs,such as XPath injection,SQL injection,etc.Results verify the correctness and validity of the method.