Security detection method and device

The invention provides a security detection method and device, and relates to the technical field of security detection.The method comprises the steps that at least one file in a software package of an application is obtained, and the at least one file comprises a source code file; according to pack...

Full description

Saved in:
Bibliographic Details
Main Author LU YOUXIN
Format Patent
LanguageChinese
English
Published 05.04.2022
Subjects
Online AccessGet full text

Cover

Loading…
More Information
Summary:The invention provides a security detection method and device, and relates to the technical field of security detection.The method comprises the steps that at least one file in a software package of an application is obtained, and the at least one file comprises a source code file; according to package guiding information in the source code file, determining a first group of open source components which may be called when the application runs; determining a second group of open source components which can be called when the application runs from the first group of open source components, wherein feature information defined by the second group of open source components is in the source code file; and determining a first security risk of the application according to the security information of the second group of open source components. 本公开提供了一种安全检测方法和装置,涉及安全检测技术领域,所述方法包括:获取应用的软件包中的至少一个文件,所述至少一个文件包括源码文件;根据所述源码文件中的导包信息,确定所述应用运行时可能会调用的第一组开源组件;从所述第一组开源组件中确定所述应用运行时会调用的第二组开源组件,所述第二组开源组件定义的特征信息在所述源码文件中;根据所述第二组开源组件的安全
Bibliography:Application Number: CN202111588939