From 5993a14368d31d6967cf56040fd50a28b7714f70 Mon Sep 17 00:00:00 2001 From: dqy <1016751306@qq.com> Date: Mon, 22 Apr 2024 17:05:14 +0800 Subject: [PATCH] =?UTF-8?q?perf:=20=E4=BF=AE=E6=94=B9=E4=BB=A3=E7=A0=81?= =?UTF-8?q?=E5=90=8E=E9=97=A8=E6=A3=80=E6=B5=8B=E8=BE=93=E5=87=BA=E8=B7=AF?= =?UTF-8?q?=E5=BE=84?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- results/code/test_backdoor_detection.html | 1 + results/code/test_backdoor_detection.md | 57 +++++++++++++++++++++++ results/code/test_backdoor_detection.txt | 57 +++++++++++++++++++++++ results/test_backdoor_detection.html | 1 - results/test_backdoor_detection.md | 53 --------------------- results/test_backdoor_detection.txt | 53 --------------------- 6 files changed, 115 insertions(+), 107 deletions(-) create mode 100644 results/code/test_backdoor_detection.html create mode 100644 results/code/test_backdoor_detection.md create mode 100644 results/code/test_backdoor_detection.txt delete mode 100644 results/test_backdoor_detection.html delete mode 100644 results/test_backdoor_detection.md delete mode 100644 results/test_backdoor_detection.txt diff --git a/results/code/test_backdoor_detection.html b/results/code/test_backdoor_detection.html new file mode 100644 index 0000000..e11fc31 --- /dev/null +++ b/results/code/test_backdoor_detection.html @@ -0,0 +1 @@ +Analysis of ../results/code\test_backdoor_detection.html

Security Analysis Report

High Risk

Medium Risk

Low Risk

None Risk

\ No newline at end of file diff --git a/results/code/test_backdoor_detection.md b/results/code/test_backdoor_detection.md new file mode 100644 index 0000000..f490869 --- /dev/null +++ b/results/code/test_backdoor_detection.md @@ -0,0 +1,57 @@ +# Security Analysis Report for ../results/code\test_backdoor_detection.md +## High Risk +- Line 9: os.system('rm -rf /') +- Line 10: exec('print("Hello")') +- Line 11: eval('2 + 2') +- Line 15: self.assertIn((2, "os.system('rm -rf /')"), results["high"]) +- Line 16: self.assertIn((3, "exec('print(\"Hello\")')"), results["high"]) +- Line 17: self.assertIn((4, "eval('2 + 2')"), results["high"]) +- Line 44: eval('2 + 2') +- Line 50: (3, "eval('2 + 2')"), +## Medium Risk +- Line 21: subprocess.run(['ls', '-l']) +- Line 23: os.popen('ls') +- Line 27: self.assertIn((2, "subprocess.run(['ls', '-l'])"), results["medium"]) +- Line 28: self.assertIn((4, "os.popen('ls')"), results["medium"]) +- Line 45: subprocess.run(['echo', 'hello']) +- Line 54: (4, "subprocess.run(['echo', 'hello'])"), +## Low Risk +## None Risk +- Line 1: import unittest +- Line 3: from detection.backdoor_detection import find_dangerous_functions +- Line 6: class TestBackdoorDetection(unittest.TestCase): +- Line 7: def test_high_risk_detection(self): +- Line 8: content = """import os +- Line 12: """ +- Line 13: file_extension = ".py" +- Line 14: results = find_dangerous_functions(content, file_extension) +- Line 19: def test_medium_risk_detection(self): +- Line 20: content = """import subprocess +- Line 22: import os +- Line 24: """ +- Line 25: file_extension = ".py" +- Line 26: results = find_dangerous_functions(content, file_extension) +- Line 30: def test_no_risk_detection(self): +- Line 31: content = """a = 10 +- Line 32: b = a + 5 +- Line 33: print('This should not be detected as risky.') +- Line 34: """ +- Line 35: file_extension = ".py" +- Line 36: results = find_dangerous_functions(content, file_extension) +- Line 37: self.assertEqual(len(results["high"]), 0) +- Line 38: self.assertEqual(len(results["medium"]), 0) +- Line 39: self.assertEqual(len(results["low"]), 0) +- Line 41: def test_inclusion_of_comments(self): +- Line 42: content = """ +- Line 43: print('This is a safe line') +- Line 46: """ +- Line 47: file_extension = ".py" +- Line 48: results = find_dangerous_functions(content, file_extension) +- Line 49: self.assertIn( +- Line 51: results["high"], +- Line 52: ) +- Line 53: self.assertIn( +- Line 55: results["medium"], +- Line 56: ) +- Line 59: if __name__ == "__main__": +- Line 60: unittest.main() diff --git a/results/code/test_backdoor_detection.txt b/results/code/test_backdoor_detection.txt new file mode 100644 index 0000000..c1e1bd0 --- /dev/null +++ b/results/code/test_backdoor_detection.txt @@ -0,0 +1,57 @@ +Security Analysis Report for ../results/code\test_backdoor_detection.txt +High Risk: + Line 9: os.system('rm -rf /') + Line 10: exec('print("Hello")') + Line 11: eval('2 + 2') + Line 15: self.assertIn((2, "os.system('rm -rf /')"), results["high"]) + Line 16: self.assertIn((3, "exec('print(\"Hello\")')"), results["high"]) + Line 17: self.assertIn((4, "eval('2 + 2')"), results["high"]) + Line 44: eval('2 + 2') + Line 50: (3, "eval('2 + 2')"), +Medium Risk: + Line 21: subprocess.run(['ls', '-l']) + Line 23: os.popen('ls') + Line 27: self.assertIn((2, "subprocess.run(['ls', '-l'])"), results["medium"]) + Line 28: self.assertIn((4, "os.popen('ls')"), results["medium"]) + Line 45: subprocess.run(['echo', 'hello']) + Line 54: (4, "subprocess.run(['echo', 'hello'])"), +Low Risk: +None Risk: + Line 1: import unittest + Line 3: from detection.backdoor_detection import find_dangerous_functions + Line 6: class TestBackdoorDetection(unittest.TestCase): + Line 7: def test_high_risk_detection(self): + Line 8: content = """import os + Line 12: """ + Line 13: file_extension = ".py" + Line 14: results = find_dangerous_functions(content, file_extension) + Line 19: def test_medium_risk_detection(self): + Line 20: content = """import subprocess + Line 22: import os + Line 24: """ + Line 25: file_extension = ".py" + Line 26: results = find_dangerous_functions(content, file_extension) + Line 30: def test_no_risk_detection(self): + Line 31: content = """a = 10 + Line 32: b = a + 5 + Line 33: print('This should not be detected as risky.') + Line 34: """ + Line 35: file_extension = ".py" + Line 36: results = find_dangerous_functions(content, file_extension) + Line 37: self.assertEqual(len(results["high"]), 0) + Line 38: self.assertEqual(len(results["medium"]), 0) + Line 39: self.assertEqual(len(results["low"]), 0) + Line 41: def test_inclusion_of_comments(self): + Line 42: content = """ + Line 43: print('This is a safe line') + Line 46: """ + Line 47: file_extension = ".py" + Line 48: results = find_dangerous_functions(content, file_extension) + Line 49: self.assertIn( + Line 51: results["high"], + Line 52: ) + Line 53: self.assertIn( + Line 55: results["medium"], + Line 56: ) + Line 59: if __name__ == "__main__": + Line 60: unittest.main() diff --git a/results/test_backdoor_detection.html b/results/test_backdoor_detection.html deleted file mode 100644 index 7241eda..0000000 --- a/results/test_backdoor_detection.html +++ /dev/null @@ -1 +0,0 @@ -Analysis of ../results\test_backdoor_detection.html

Security Analysis Report

High Risk

Medium Risk

Low Risk

None Risk

\ No newline at end of file diff --git a/results/test_backdoor_detection.md b/results/test_backdoor_detection.md deleted file mode 100644 index 8afe1f5..0000000 --- a/results/test_backdoor_detection.md +++ /dev/null @@ -1,53 +0,0 @@ -# Security Analysis Report for ../results\test_backdoor_detection.md -## High Risk -- Line 8: os.system('rm -rf /') -- Line 9: exec('print("Hello")') -- Line 10: eval('2 + 2') -- Line 13: self.assertIn((2, "os.system('rm -rf /')"), results["high"]) -- Line 14: self.assertIn((3, "exec('print(\"Hello\")')"), results["high"]) -- Line 15: self.assertIn((4, "eval('2 + 2')"), results["high"]) -- Line 40: eval('2 + 2') -- Line 45: (3, "eval('2 + 2')"), -## Medium Risk -- Line 19: subprocess.run(['ls', '-l']) -- Line 21: os.popen('ls') -- Line 24: self.assertIn((2, "subprocess.run(['ls', '-l'])"), results["medium"]) -- Line 25: self.assertIn((4, "os.popen('ls')"), results["medium"]) -- Line 41: subprocess.run(['echo', 'hello']) -- Line 49: (4, "subprocess.run(['echo', 'hello'])"), -## Low Risk -## None Risk -- Line 1: import unittest -- Line 2: from detection.backdoor_detection import find_dangerous_functions -- Line 5: class TestBackdoorDetection(unittest.TestCase): -- Line 6: def test_high_risk_detection(self): -- Line 7: content = """import os -- Line 11: """ -- Line 12: results = find_dangerous_functions(content) -- Line 17: def test_medium_risk_detection(self): -- Line 18: content = """import subprocess -- Line 20: import os -- Line 22: """ -- Line 23: results = find_dangerous_functions(content) -- Line 27: def test_no_risk_detection(self): -- Line 28: content = """a = 10 -- Line 29: b = a + 5 -- Line 30: print('This should not be detected as risky.') -- Line 31: """ -- Line 32: results = find_dangerous_functions(content) -- Line 33: self.assertEqual(len(results["high"]), 0) -- Line 34: self.assertEqual(len(results["medium"]), 0) -- Line 35: self.assertEqual(len(results["low"]), 0) -- Line 37: def test_inclusion_of_comments(self): -- Line 38: content = """ -- Line 39: print('This is a safe line') -- Line 42: """ -- Line 43: results = find_dangerous_functions(content) -- Line 44: self.assertIn( -- Line 46: results["high"], -- Line 47: ) -- Line 48: self.assertIn( -- Line 50: results["medium"], -- Line 51: ) -- Line 54: if __name__ == "__main__": -- Line 55: unittest.main() diff --git a/results/test_backdoor_detection.txt b/results/test_backdoor_detection.txt deleted file mode 100644 index c9a0993..0000000 --- a/results/test_backdoor_detection.txt +++ /dev/null @@ -1,53 +0,0 @@ -Security Analysis Report for ../results\test_backdoor_detection.txt -High Risk: - Line 8: os.system('rm -rf /') - Line 9: exec('print("Hello")') - Line 10: eval('2 + 2') - Line 13: self.assertIn((2, "os.system('rm -rf /')"), results["high"]) - Line 14: self.assertIn((3, "exec('print(\"Hello\")')"), results["high"]) - Line 15: self.assertIn((4, "eval('2 + 2')"), results["high"]) - Line 40: eval('2 + 2') - Line 45: (3, "eval('2 + 2')"), -Medium Risk: - Line 19: subprocess.run(['ls', '-l']) - Line 21: os.popen('ls') - Line 24: self.assertIn((2, "subprocess.run(['ls', '-l'])"), results["medium"]) - Line 25: self.assertIn((4, "os.popen('ls')"), results["medium"]) - Line 41: subprocess.run(['echo', 'hello']) - Line 49: (4, "subprocess.run(['echo', 'hello'])"), -Low Risk: -None Risk: - Line 1: import unittest - Line 2: from detection.backdoor_detection import find_dangerous_functions - Line 5: class TestBackdoorDetection(unittest.TestCase): - Line 6: def test_high_risk_detection(self): - Line 7: content = """import os - Line 11: """ - Line 12: results = find_dangerous_functions(content) - Line 17: def test_medium_risk_detection(self): - Line 18: content = """import subprocess - Line 20: import os - Line 22: """ - Line 23: results = find_dangerous_functions(content) - Line 27: def test_no_risk_detection(self): - Line 28: content = """a = 10 - Line 29: b = a + 5 - Line 30: print('This should not be detected as risky.') - Line 31: """ - Line 32: results = find_dangerous_functions(content) - Line 33: self.assertEqual(len(results["high"]), 0) - Line 34: self.assertEqual(len(results["medium"]), 0) - Line 35: self.assertEqual(len(results["low"]), 0) - Line 37: def test_inclusion_of_comments(self): - Line 38: content = """ - Line 39: print('This is a safe line') - Line 42: """ - Line 43: results = find_dangerous_functions(content) - Line 44: self.assertIn( - Line 46: results["high"], - Line 47: ) - Line 48: self.assertIn( - Line 50: results["medium"], - Line 51: ) - Line 54: if __name__ == "__main__": - Line 55: unittest.main()