应凌云,杨轶.软件动态分析与信息系统安全[J].中国科学院院刊,2011,(3):310-315.

软件动态分析与信息系统安全

Software Dynamic Analysis for Enhancing Information System Security

应凌云
中国科学院软件研究所信息安全国家重点实验室
Ying Lingyun
State Key Laboratory of Information Security,Institute of Software,CAS 100190 Beijing
杨轶
中国科学院软件研究所信息安全国家重点实验室
Yang Yi
State Key Laboratory of Information Security,Institute of Software,CAS 100190 Beijing

         软件动态分析;恶意代码分析;漏洞挖掘;信息系统安全

        dynamic analysis of software;malicious code analysis;finding out vulnerability;security of information system

        信息系统的应用越来越广泛,软件被视为信息系统的灵魂,已经在金融、军事、交通、基础设施等领域扮演越来越重要的角色,软件安全性已经成为关系到国民经济平稳发展、社会稳定和国家安全的重要因素。本文分析了国内外软件安全性研究的现状,并对软件安全性分析的主要科学问题和当前我国的重要需求进行了剖析,提出在信息系统安全保障能力建设中,应以加强软件安全性分析能力为导向,以提高软件的安全性分析水平为目标,以软件动态分析为关键技术手段,加强软件安全性分析基础方法研究,加强信息系统安全性分析和保障的专业人才队伍建设,为保障我国信息系统安全和网络空间主权提供技术支撑。

        As information system is more and more widely used and software is taken as the soul of information system,it has been playing a more and more important role in finance,military,traffic,infrastructure and other sectors,and therefore security of software becomes a key factor of social stability and national security.In this paper,the authors present a survey of the present status of the software security analysis and research in China and foreign countries,and analyze the principal scientific problems of software security analysis and the important demand of China in this field at the present time.The authors propose that the basic method study of the analysis of security of information system should be enhanced;and professional talents contingent should be constructed,so as to offer technological support for ensuring the security of information system and network space sovereign rights of China.