摘要
網際網路發展一日千里，為因應市場需求，網頁應用系統越來越多，其網路安全性越加不可忽視。有些開發者只因時程關係，期望儘速將功能實現，以致疏忽或由於所用程式語言特性，導致系統安全性的疏漏。另一方面，委外開發的網頁系統越來越多，委託者檢測委外程式碼的安全性之需求益加重要。本論文提出一種靜態分析架構，期於產品上線前先針對程式原始碼檢測，在開發階段就能處理程式碼的安全問題，提昇軟體系統的安全品質。本研究開發一個安全分析檢測平台架構，可以嵌入現有或以後可能發展出的安全分析工具，提供開發者分析檢測系統的程式碼，並提供修補建議方案。
並列摘要
The Internet technology has grown rapidly, to handle the demand of the market nowadays, more and more web-based systems have been made, and the security of the system has been an issue. Some developers wish to realize functions that the project required in a very short period that over sighting the vulnerabilities caused by the specification of the programming language. In another way, there are more and more outsourcing systems that increasing the importance of inspecting the of the source code of the outsourced system. This paper presents a static analyzing structure that allows us to inspect the source code before the product was released, being aware of the security issues during the development phase and increase the security level of the software system. This study develops a structure could be worked as a plug-in with present or further security analyzing tools that provides assistance to the developers to analyze and inspect the source code of the system, and suggestions to fix the vulnerabilities that.
參考文獻
延伸閱讀
- Wei, Y. H. (2020). 以動態原始碼插入技術剖析數據分配服務 [master's thesis, National Taiwan University]. Airiti Library. https://doi.org/10.6342/NTU202003931
- 顏明賢（2004）。程式碼基模的生成—一個教學實驗過程與結果之分析〔碩士論文，中原大學〕。華藝線上圖書館。https://doi.org/10.6840/cycu200400154
- 張洪奇（2021）。交易行情傳輸系統編碼優化之實證研究。證券服務，(684)，62-66。https://www.airitilibrary.com/Article/Detail?DocID=P20150728001-202108-202108190014-202108190014-62-66
- 林家禾（2018）。A study on effective approaches of source code analysis to detect plagiarism〔碩士論文，中原大學〕。華藝線上圖書館。https://doi.org/10.6840/cycu201800097
- 吳廸（2013）。A Study of Malicious Code Detection〔碩士論文，健行科技大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0022-0207201313565200