BackDoorBuster/results/code/test_backdoor_detection.md

Security Analysis Report for ../results/code\test_backdoor_detection.md

High Risk

• Line 9: os.system('rm -rf /')
• Line 10: exec('print("Hello")')
• Line 11: eval('2 + 2')
• Line 15: self.assertIn((2, "os.system('rm -rf /')"), results["high"])
• Line 16: self.assertIn((3, "exec('print("Hello")')"), results["high"])
• Line 17: self.assertIn((4, "eval('2 + 2')"), results["high"])
• Line 44: eval('2 + 2')
• Line 50: (3, "eval('2 + 2')"),

Medium Risk

• Line 21: subprocess.run(['ls', '-l'])
• Line 23: os.popen('ls')
• Line 27: self.assertIn((2, "subprocess.run(['ls', '-l'])"), results["medium"])
• Line 28: self.assertIn((4, "os.popen('ls')"), results["medium"])
• Line 45: subprocess.run(['echo', 'hello'])
• Line 54: (4, "subprocess.run(['echo', 'hello'])"),

Low Risk

None Risk

• Line 1: import unittest
• Line 3: from detection.backdoor_detection import find_dangerous_functions
• Line 6: class TestBackdoorDetection(unittest.TestCase):
• Line 7: def test_high_risk_detection(self):
• Line 8: content = """import os
• Line 12: """
• Line 13: file_extension = ".py"
• Line 14: results = find_dangerous_functions(content, file_extension)
• Line 19: def test_medium_risk_detection(self):
• Line 20: content = """import subprocess
• Line 22: import os
• Line 24: """
• Line 25: file_extension = ".py"
• Line 26: results = find_dangerous_functions(content, file_extension)
• Line 30: def test_no_risk_detection(self):
• Line 31: content = """a = 10
• Line 32: b = a + 5
• Line 33: print('This should not be detected as risky.')
• Line 34: """
• Line 35: file_extension = ".py"
• Line 36: results = find_dangerous_functions(content, file_extension)
• Line 37: self.assertEqual(len(results["high"]), 0)
• Line 38: self.assertEqual(len(results["medium"]), 0)
• Line 39: self.assertEqual(len(results["low"]), 0)
• Line 41: def test_inclusion_of_comments(self):
• Line 42: content = """
• Line 43: print('This is a safe line')
• Line 46: """
• Line 47: file_extension = ".py"
• Line 48: results = find_dangerous_functions(content, file_extension)
• Line 49: self.assertIn(
• Line 51: results["high"],
• Line 52: )
• Line 53: self.assertIn(
• Line 55: results["medium"],
• Line 56: )
• Line 59: if name == "main":
• Line 60: unittest.main()