摘要：Recently, as information systems have been hacked and personal information leakage accidents haveoccurred frequently, the korea government enacted a secure coding guide and made it mandatory forinformatization projects related to the electronic government. However, it is not easy for general developersto know and implement all software vulnerabilities in secure coding. Also, it is difficult to check forvulnerabilities in previously developed software. Therefore, there is a need for techniques to automaticallyanalyze security vulnerabilities at the source code level and visualize the results. In this paper, we proposea method to analyze security vulnerability more easily by applying software visualization technology tosecure coding.
关键词：metamodel; secure vulnerability; secure coding; abstract syntax tree
