RESEARCH OF METHODS FOR DETECTING VULNERABILITIES IN SOFTWARE AND INFORMATION AND COMMUNICATION SYSTEMS BASED ON THE WINDOWS OPERATING SYSTEM WITH THE DEVELOPMENT OF AUTOMATED ANALYSIS SOFTWARE

Abstract

The article investigates modern methods of detecting vulnerabilities in software and information and communication systems, and also develops a software tool for automated analysis of potential threats based on the Windows operating system. A comparative analysis of the main approaches to detecting vulnerabilities, in particular static and dynamic analysis, is carried out, their advantages, disadvantages and areas of practical application are determined. Based on the research, a software tool in Python has been developed that automates the process of analyzing the source code, operating system parameters and network configuration in order to identify potential vulnerabilities. The implemented algorithm provides analysis of the program code for the use of potentially dangerous structures, the MD5 hashing algorithm and cases of hard coding of passwords. In addition to software analysis, the parameters of the Windows operating system are checked, as well as analysis of open network ports and configuration of network interfaces. Based on the analysis results, the software tool generates text and HTML reports that contain a list of detected potential vulnerabilities, a risk assessment, statistical information on the analysis results and recommendations for eliminating the identified shortcomings. The proposed approach makes it possible to automate the process of initial security auditing of software and information and communication systems, and to increase the efficiency of identifying potential threats.