{"id":101737,"date":"2021-10-24T22:22:41","date_gmt":"2021-10-24T20:22:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/intel-otkryl-kod-sistemy-mashinnogo-obucheniya-controlflag-dlya-vyyavleniya-oshibok-v-kode"},"modified":"2021-10-24T22:22:41","modified_gmt":"2021-10-24T20:22:41","slug":"intel-otkryl-kod-sistemy-mashinnogo-obucheniya-controlflag-dlya-vyyavleniya-oshibok-v-kode","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/intel-otkryl-kod-sistemy-mashinnogo-obucheniya-controlflag-dlya-vyyavleniya-oshibok-v-kode","title":{"rendered":"Intel, koddak\u0131 x\u0259talar\u0131 a\u015fkar etm\u0259k \u00fc\u00e7\u00fcn ControlFlag ma\u015f\u0131n \u00f6yr\u0259nm\u0259 sisteminin kodunu a\u00e7d\u0131","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Intel \u015firk\u0259ti Kontrolluq layih\u0259si il\u0259 \u0259laq\u0259li t\u0259dqiqat i\u015fl\u0259rini t\u0259qdim etdi; bu layih\u0259nin m\u0259qs\u0259di kodun keyfiyy\u0259tini art\u0131rmaq \u00fc\u00e7\u00fcn ma\u015f\u0131n \u00f6yr\u0259nm\u0259 sisteminin yarad\u0131lmas\u0131d\u0131r. Layih\u0259 t\u0259r\u0259find\u0259n haz\u0131rlanm\u0131\u015f al\u0259tl\u0259r, m\u00f6vcud kodun b\u00f6y\u00fck bir h\u0259cmi \u0259sas\u0131nda t\u0259lim edilmi\u015f model\u0259 \u0259saslanaraq, C\/C++ kimi y\u00fcks\u0259k s\u0259viyy\u0259li dill\u0259rd\u0259 yaz\u0131lm\u0131\u015f m\u0259nb\u0259 kodlar\u0131nda m\u00fcxt\u0259lif s\u0259hvl\u0259ri v\u0259 anomaliyalar\u0131 a\u015fkar etm\u0259y\u0259 imkan tan\u0131y\u0131r. Sistem, kodda olan m\u00fcxt\u0259lif probleml\u0259ri m\u00fc\u0259yy\u0259n etm\u0259y\u0259 yar\u0131y\u0131r, m\u0259s\u0259l\u0259n, s\u0259hvl\u0259ri tapmaqdan, n\u00f6v uy\u011funlu\u011fu problemind\u0259n, NULL d\u0259y\u0259rinin yoxlan\u0131lmas\u0131n\u0131n itirilm\u0259sin\u0259 v\u0259 yadda\u015fla ba\u011fl\u0131 m\u0259s\u0259l\u0259l\u0259rin a\u015fkar edilm\u0259sin\u0259 q\u0259d\u0259r. <\/p>\n

Sistem, GitHub v\u0259 ox\u015far a\u00e7\u0131q resurslarda d\u0259rc edilmi\u015f proyektl\u0259rin m\u00f6vcud kod bazas\u0131n\u0131n statistik modelini quraraq, \u00f6z-\u00f6z\u00fcn\u0259 \u00f6yr\u0259nir. \u00d6yr\u0259nm\u0259 m\u0259rh\u0259l\u0259sind\u0259 sistem, kodda qur\u011fular\u0131n in\u015fas\u0131nda tipik n\u00fcmun\u0259l\u0259ri m\u00fc\u0259yy\u0259n edir v\u0259 bu n\u00fcmun\u0259l\u0259r aras\u0131nda kodun icra ax\u0131n\u0131n\u0131 \u0259ks etdir\u0259n sintaktik a\u011fac d\u00fcz\u0259ldir. N\u0259tic\u0259d\u0259, t\u0259hlil edilmi\u015f b\u00fct\u00fcn m\u0259nb\u0259 kodlar\u0131n\u0131n inki\u015faf t\u0259cr\u00fcb\u0259sini birl\u0259\u015fdir\u0259n q\u0259rar q\u0259bul etm\u0259 standart a\u011fac\u0131 yaran\u0131r. <\/p>\n

Test olunan kod \u00fc\u00e7\u00fcn q\u0259rar q\u0259bul etm\u0259 a\u011fac\u0131na uy\u011fun g\u0259l\u0259n \u015fablonlar\u0131n m\u00fc\u0259yy\u0259n edilm\u0259si \u00fc\u00e7\u00fcn b\u0259nz\u0259r bir proses h\u0259yata ke\u00e7irilir. Qon\u015fu budaqlarla olan b\u00f6y\u00fck f\u0259rqlilikl\u0259r yoxlan\u0131lan \u015fablonda anomaliyan\u0131n oldu\u011funu g\u00f6st\u0259rir. Sistem h\u0259m\u00e7inin yaln\u0131z \u015fablondak\u0131 s\u0259hvl\u0259ri a\u015fkar etmir, h\u0259m d\u0259 d\u00fcz\u0259li\u015f t\u0259klif edir. M\u0259s\u0259l\u0259n, OpenSSL kodunda «(s1 == NULL) ∧ (s2 == NULL)» qurulu\u015fu sintaktik a\u011f\u00e7ada sad\u0259c\u0259 8 d\u0259f\u0259 a\u015fkar edilmi\u015fdir, halbuki «(s1 == NULL) || (s2 == NULL)» d\u0259y\u0259ri il\u0259 \u0259n yax\u0131n budaq t\u0259xmin\u0259n 7 min d\u0259f\u0259 i\u015ftirak edir. Sistem h\u0259m\u00e7inin «(s1 == NULL) | (s2 == NULL)» anomaliyas\u0131n\u0131 a\u015fkar etdi ki, bu da a\u011facda 32 d\u0259f\u0259 ba\u015f vermi\u015fdir.

\"Intel,<\/center> <\/p>\n

Kod par\u00e7as\u0131n\u0131n «if (x = 7) y = x;» analizi zaman\u0131 sistem m\u00fc\u0259yy\u0259n etdi ki, ad\u0259t\u0259n «if» \u0259mrind\u0259 \u0259d\u0259di d\u0259y\u0259rl\u0259rin m\u00fcqayis\u0259si \u00fc\u00e7\u00fcn «d\u0259yi\u015f\u0259n == \u0259d\u0259d» qurulu\u015fu istifad\u0259 olunur, buna g\u00f6r\u0259 «d\u0259yi\u015f\u0259n = \u0259d\u0259d» ifad\u0259sind\u0259 «if» \u0259mri yaz\u0131 s\u0259hvi il\u0259 ba\u011fl\u0131d\u0131r. Bu c\u00fcr s\u0259hv\u0259n adi statik analizatorlar da a\u015fkarlayar, lakin ControlFlag, b\u00fct\u00fcn m\u00fcmk\u00fcn variantlar\u0131 n\u0259z\u0259r\u0259 almaq \u00e7\u0259tin olan haz\u0131r qaydalardan istifad\u0259 etmir, \u0259ksin\u0259, \u00e7oxlu layih\u0259l\u0259rd\u0259 m\u00fcxt\u0259lif qurulu\u015flar\u0131n istifad\u0259sinin statistikas\u0131 il\u0259 y\u00f6n\u0259lir. <\/p>\n

Eksperiment olaraq ControlFlag vasit\u0259sil\u0259 cURL vasit\u0259l\u0259rinin m\u0259nb\u0259 kodlar\u0131nda, tez-tez keyfiyy\u0259tli v\u0259 s\u00fcbut olunmu\u015f kod n\u00fcmun\u0259si kimi t\u0259qdim edil\u0259n bir s\u0259hv a\u015fkar edilmi\u015fdir ki, bu da statik analizatorlar t\u0259r\u0259find\u0259n g\u00f6rs\u0259nm\u0259mi\u015fdir. S\u0259hv «s->keepon» strukturu elementi il\u0259 ba\u011fl\u0131d\u0131r ki, bu da \u0259d\u0259di tipi var, lakin TRUE boolean d\u0259y\u0259ri il\u0259 m\u00fcqayis\u0259 edilir. OpenSSL kodunda, yuxar\u0131da qeyd olunan «(s1 == NULL) ∧ (s2 == NULL)» problemi il\u0259 yana\u015f\u0131, «(-2 == rv)» (m\u0259nfi yaz\u0131 s\u0259hvi idi) v\u0259 «BIO_puts(bp, «:»)» ifad\u0259l\u0259rind\u0259 d\u0259 anomaliyalar a\u015fkar edildi.
\n
M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c ControlFlag, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u0434\u0430. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043c\u043e\u0434\u0435\u043b\u0438, \u043e\u0431\u0443\u0447\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u043e\u043b\u044c\u0448\u043e\u043c \u043e\u0431\u044a\u0451\u043c\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u043a\u043e\u0434\u0430, \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438 \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u0430\u0445, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u044b\u0445 \u044f\u0437\u044b\u043a\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a C\/C++. \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u0434\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0438\u0434\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101738,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101737","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel, koddak\u0131 x\u0259talar\u0131 a\u015fkar etm\u0259k \u00fc\u00e7\u00fcn ControlFlag ma\u015f\u0131n \u00f6yr\u0259nm\u0259 sisteminin kodunu a\u00e7d\u0131 | ProHoster","description":"Intel, kodun keyfiyy\u0259tini art\u0131rmaq m\u0259qs\u0259dil\u0259 ControlFlag t\u0259dqiqat layih\u0259si il\u0259 ba\u011fl\u0131 g\u0259l\u0259c\u0259k i\u015fl\u0259rini a\u00e7\u0131q elan edib.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/intel-otkryl-kod-sistemy-mashinnogo-obucheniya-controlflag-dlya-vyyavleniya-oshibok-v-kode","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel \u043e\u0442\u043a\u0440\u044b\u043b \u043a\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f ControlFlag \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u0434\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c ControlFlag, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/intel-otkryl-kod-sistemy-mashinnogo-obucheniya-controlflag-dlya-vyyavleniya-oshibok-v-kode","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-24T20:22:41+00:00","article:modified_time":"2021-10-24T20:22:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101737","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-24 20:24:32","updated":"2022-10-04 22:00:53","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/101737","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=101737"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/101737\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media\/101738"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=101737"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=101737"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=101737"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}