Abstract: A method for detecting vulnerability according to an embodiment includes performing taint analysis on a front-end source code generated with a first programming language of a program composed of the front-end source code and a back-end source code generated with a second programming language, generating a back-end call table including input parameter taint information for a called function called by the front-end source code among one or more back-end functions included in the back-end source code, based on a result of the taint analysis on the front-end source code, and performing taint analysis on the back-end source code based on the back-end call table.

Abstract: Provided is a method of detecting a NOP sled, which is performed by a computing apparatus. The method comprises determining, as a NOP sled characteristic value, a longest consecutive length of at least one of previously found NOP sled patterns, with respect to a plurality of tracking target memory blocks allocated in a memory of the computing apparatus and detecting whether or not a NOP sled occurs based on the NOP sled characteristic value of at least one of the plurality of tracking target memory blocks and a memory block length of the at least one of the plurality of tracking target memory blocks.