Analysis of software vulnerability

Software vulnerability is the fault that can be viciously used to harm security of software system. In order to decrease the harm, vulnerability analysis can be used to find security problems of software system as early as possible, and related measures, such as correctness, avoidance, may be planed. Vulnerability analysis is divided into two types, one is static analysis of vulnerability, the other is dynamic analysis of vulnerability. In this paper, we will introduce libFunction, which is a kind of dynamic analysis of vulnerability. LibFunction runs on redhat linux. It analyzes vulnerabilities related to library function. The main functions of libFunction are testing the behavior of application program when the return value of the called function is abnormal, and assessing the behavior.