Grouping DFA based source code vulnerability detection method

The present invention provides a grouping DFA based source code vulnerability detection method. The method comprises: (1) constructing a regular expression according to a common source code vulnerability feature; (2) constructing a feature matching DFA engine by using a grouping DFA algorithm; and (3) performing vulnerability detection according to the feature matching DFA engine. According to the method provided by the present invention, a DFA engine generated by an expression is optimized, and a regular expression grouping algorithm is optimized, so that a grouping effect is better, memory consumption is more excellent, and huge losses brought by a software security problem are reduced.