Application analysis method, analysis system and recording medium

An analysis system that comprises a processor for executing a program and a memory for storing the program executed by the processor, for analyzing an application program that comprises a database operation statement,

• the processor being configured to:
• analyze a control flow of the application program and data used in the application program based on the application program and on an execution result of the application program;
• analyze, when the application program comprises a plurality of database operation statements, a dependency relation among the plurality of database operation statements based on a result of the analysis on the application program and specifics of operations of the plurality of database operation statements;
• analyze, based on the result of the analysis on the application program and a result of the analysis on the plurality of database operation statements, a propagation route of an invalid operation of the application program by using, as an analysis start point, a given spot of the invalid operation in the application program and following the control flow backwards;
• and
• present program statements on the propagation path.

A recording medium having stored thereon an analysis program to be used for an analysis system that comprises a processor for executing a program and a memory for storing the program executed by the processor, for analyzing an application program that comprises a database operation statement, the analysis program controlling the analysis system to execute:

• a first step of analyzing a control flow of the application program and data used in the application program based on the application program and on an execution result of the application program;
• a second step of analyzing, when the application program comprises a plurality of database operation statements, a dependency relation among the plurality of database operation statements based on a result of the analysis of the first step and specifics of operations of the plurality of database operation statements;
• a third step of analyzing, based on the result of the analysis of the first step and a result of the analysis of the second step, a propagation route of an invalid operation of the application program by using, as an analysis start point, a given spot of the invalid operation in the application program, and following the control flow backwards;
• and
• a fourth step of presenting program statements on the propagation path obtained in the third step.