STATIC SOURCE CODE ANALYSIS FOR SEARCHING SECURITY VULNERABILITIES

V diplomskem delu smo preučili pristop statične analize programske kode za iskanje varnostnih lukenj. Obravnavali smo nekatere postopke za iskanje varnostnih lukenj, enega izmed njih pa tudi implementirali v orodju StarkC. S tem orodjem smo analizirali netrivialen primer programske kode, napisane v jeziku C. Dobljene rezultate smo analizirali ter jih primerjali z rezultati sorodnih orodij za statično analizo. Na podlagi teh rezultatov smo v zaključku strnili ugotovitve, pomanjkljivosti ter možne izboljšave.In this diploma thesis, we studied static analysis techniques for searching security vulnerabilities in program source code. We reviewed several methods for searching security vulnerabilities, one of them we also implemented in a tool named StarkC. By using this tool, we analysed the source code of a non-trivial program, written in C language. We analysed the obtained results and compared them with results of related tools for static analysis. Based on these results, we summed-up our findings, flaws and possible improvements in the conclusion