Device for providing analysis capability, method for providing analysis capability, and program for providing analysis capability

An analysis function imparting method executed by an analysis function imparting device, the method comprising:

• acquiring a plurality of execution traces related to a branch instruction and a memory access, by inputting a test script to a script engine and causing the script engine to execute the test script;
• specifying a similar sequence on the basis of the plurality of execution traces and detects a function call included in the specified sequence as a candidate of a type conversion function;
• detecting a variable having an input/output relationship from a variable of a candidate argument and a return value of the type conversion function among the execution traces;
• executing a taint analysis on the type variable function of the variable having the input/output relationship of the type conversion function, and detecting a propagation leakage function indicating a type variable function in which a tag does not propagate between the input and output;
• generating a forced propagation rule for forcibly propagating the tag with respect to the propagation leakage function;
• and
• imparting a taint analysis function to the script engine on the basis of the forced propagation rule.

An analysis function imparting program which causes a computer to execute:

• acquiring a plurality of execution traces related to a branch instruction and a memory access, by inputting a test script to a script engine and causing the script engine to execute the test script;
• specifying a similar sequence on the basis of the plurality of execution traces and detects a function call included in the specified sequence as a candidate of a type conversion function;
• detecting a variable having an input/output relationship from a variable of a candidate argument and a return value of the type conversion function among the execution traces;
• executing a taint analysis on the type variable function of the variable having the input/output relationship of the type conversion function, and detects a propagation leakage function indicating a type variable function in which a tag does not propagate between the input and output;
• generating a forced propagation rule for forcibly propagating the tag with respect to the propagation leakage function;
• and
• imparting a taint analysis function to the script engine on the basis of the forced propagation rule.