本文選題：嵌入式程序 + 指針缺陷��； 參考：《大連理工大學(xué)》2012年碩士論文

【摘要】：嵌入式系統(tǒng)技術(shù)軟硬件結(jié)合的優(yōu)勢,在各行各業(yè)有著廣泛而成熟的應(yīng)用,是當(dāng)今計(jì)算機(jī)科學(xué)領(lǐng)域研究的熱點(diǎn)問題。C程序指針使用復(fù)雜,加之C語言規(guī)范并未對指針的使用做過多限制,使得指針的誤用難以避免,甚至帶來嚴(yán)重的安全隱患。此外,嵌入式程序開發(fā)過程依賴于交叉編譯環(huán)境,導(dǎo)致程序的開發(fā)和測試更加困難。因此,針對C程序指針的缺陷檢測和可靠性研究,對于保證嵌入式程序的安全穩(wěn)定運(yùn)行有著極其重要的意義。 程序缺陷檢測通常分為兩種方法,一種是運(yùn)行時(shí)檢測法,即動(dòng)態(tài)檢測法,另一種方法不依賴于程序運(yùn)行,被稱為靜態(tài)檢測方法。兩種方法各有優(yōu)點(diǎn),靜態(tài)檢測執(zhí)行效率高、設(shè)計(jì)相對簡便且不依賴于檢測代碼的編譯運(yùn)行,所以更加適應(yīng)對跨平臺(tái)開發(fā)模式下的嵌入式程序進(jìn)行缺陷檢查。本文通過對國內(nèi)外靜態(tài)檢測理論與技術(shù)的研究,提出了一種基于源代碼模型轉(zhuǎn)化與缺陷模式匹配的思想進(jìn)行缺陷檢查的方法。其核心思想是,將源代碼轉(zhuǎn)化成能夠完整表達(dá)源碼語義,同時(shí)又具有良好結(jié)構(gòu)化查詢能力的XML映射模型,同時(shí)將缺陷模式采用XML查詢語言XQuery構(gòu)建模型,通過驅(qū)動(dòng)兩者之間進(jìn)行模式匹配最終實(shí)現(xiàn)缺陷檢查。為了適應(yīng)不同檢測對象或環(huán)境的相關(guān)要求,提出了構(gòu)建缺陷知識庫的基本方法,通過靈活配置檢測方案,執(zhí)行不同的檢測策略。此外,缺陷知識庫的設(shè)計(jì),使得系統(tǒng)便于開發(fā)和維護(hù),同時(shí)極大地提高了系統(tǒng)的擴(kuò)展性。 本文所提出的檢測系統(tǒng)在開發(fā)和測試的過程中進(jìn)行了大量的測試和檢測結(jié)果分析,驗(yàn)證了本文所提出指針安全檢測方法的正確性和檢測系統(tǒng)的實(shí)用性。本研究的主要工作獲得了國家自然科學(xué)基金重大培育計(jì)劃(航天嵌入式軟件可信性度量方法與系統(tǒng),91018003)的資助,再次感謝基金委對本項(xiàng)目組工作的支持。
[Abstract]:The advantage of the integration of hardware and software of embedded system technology has a wide range of mature applications in various industries, which is a hot issue in the field of computer science. Moreover, the C language specification does not limit the use of pointers too much, which makes it difficult to avoid the misuse of pointers, and even brings serious security risks. In addition, the development process of embedded programs depends on cross-compiling environment, which makes it more difficult to develop and test programs. Therefore, the research on the defect detection and reliability of C program pointer is of great significance to ensure the safe and stable operation of embedded program. Program defect detection is usually divided into two methods, one is runtime detection, that is, dynamic detection, the other is not dependent on program running, so it is called static detection method. The two methods have their own advantages, such as high execution efficiency of static detection, relatively simple design and independent of compiling and running of the detection code, so they are more suitable for defect checking of embedded programs in cross-platform development mode. Based on the research of static detection theory and technology at home and abroad, this paper presents a method of defect checking based on the idea of source code model transformation and defect pattern matching. Its core idea is to transform the source code into a XML mapping model which can express the semantics of the source code and at the same time has a good ability of structured query. At the same time, the defect pattern is constructed by using the XML query language XQuery. The defect checking is realized by driving pattern matching between them. In order to meet the requirements of different detection objects or environments, a basic method of constructing defect knowledge base is proposed. Different detection strategies are implemented through flexible configuration of detection schemes. In addition, the design of defect knowledge base makes the system easy to develop and maintain, and greatly improves the expansibility of the system. In the process of development and testing, a large number of tests and test results have been carried out in the detection system proposed in this paper, which verifies the correctness of the proposed pointer safety detection method and the practicability of the detection system. The main work of this study was supported by the National Natural Science Foundation of China (Space embedded Software credibility Measurement method and system 91018003).
【學(xué)位授予單位】：大連理工大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2012
【分類號】：TP368.1;TP311.11

【參考文獻(xiàn)】

相關(guān)期刊論文 前6條

1 夏瑋瑋 ,沈連豐 ,肖婕 ,毛宇斌;嵌入式系統(tǒng)關(guān)鍵技術(shù)分析與開發(fā)應(yīng)用[J];今日電子;2003年05期

2 郭春霞,裘雪紅;嵌入式系統(tǒng)安全的研究與設(shè)計(jì)[J];電子科技;2005年08期

3 楊宇;張健;;程序靜態(tài)分析技術(shù)與工具[J];計(jì)算機(jī)科學(xué);2004年02期

4 張林;曾慶凱;;軟件安全漏洞的靜態(tài)檢測技術(shù)[J];計(jì)算機(jī)工程;2008年12期

5 向東,劉海燕;C/C++靜態(tài)代碼安全檢查工具研究[J];計(jì)算機(jī)工程與設(shè)計(jì);2005年08期

6 韓衛(wèi)崗;周紅建;趙祿豐;;軟件缺陷信息分析研究[J];計(jì)算機(jī)工程與設(shè)計(jì);2008年13期

相關(guān)碩士學(xué)位論文 前1條

1 欒紹楠;C/C++程序中指針有效性的靜態(tài)檢測[D];西安電子科技大學(xué);2006年

，

本文編號：1825273