20.500.12556/DKUM-16443 STATIČNA ANALIZA PROGRAMSKE KODE ZA ISKANJE VARNOSTNIH LUKENJ STATIC SOURCE CODE ANALYSIS FOR SEARCHING SECURITY VULNERABILITIES V diplomskem delu smo preučili pristop statične analize programske kode za iskanje varnostnih lukenj. Obravnavali smo nekatere postopke za iskanje varnostnih lukenj, enega izmed njih pa tudi implementirali v orodju StarkC. S tem orodjem smo analizirali netrivialen primer programske kode, napisane v jeziku C. Dobljene rezultate smo analizirali ter jih primerjali z rezultati sorodnih orodij za statično analizo. Na podlagi teh rezultatov smo v zaključku strnili ugotovitve, pomanjkljivosti ter možne izboljšave. In this diploma thesis, we studied static analysis techniques for searching security vulnerabilities in program source code. We reviewed several methods for searching security vulnerabilities, one of them we also implemented in a tool named StarkC. By using this tool, we analysed the source code of a non-trivial program, written in C language. We analysed the obtained results and compared them with results of related tools for static analysis. Based on these results, we summed-up our findings, flaws and possible improvements in the conclusion. varnostne ranljivosti statična analiza programska koda preverjanje z modeli security vulnerabilities static analysis software model checking true true false [R. Napotnik] Slovenski jezik Angleški jezik Diplomsko delo 2010-10-18 16:51:27 2012-01-31 10:38:18 2022-04-13 08:10:26 2023-12-20 03:34:11 2010 0 Maribor 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 004.43.03(043.2) 15957526 URN:SI:UM:DK:MWHXLICP MAG_Napotnik_Rok_2011.pdf MAG_Napotnik_Rok_2011.pdf 1 28BE59215F1AB8C42AFD501CBC18AA88 8debc4099af24213e23ecdd5b4bf441b8b1107851f73fc6ddccf1a20f19831e2 8a76dce4-7c05-11eb-bb7a-00155d0001ca 20.500.12556/dkum/6c306be4-e6bb-4f9b-b93b-4287e3ad82a3 https://dk.um.si/Dokument.php?lang=slv&id=24747 Fakulteta za elektrotehniko, računalništvo in informatiko 0 0 0