Dynamic scanning model

[Col-E]

Example of format for partial matching of https://stackoverflow.com/questions/62289/read-write-to-windows-registry-using-java

{
  "archetype": {
    "level": "MAXIMUM",
    "identifier": "Windows Registry",
    "description": "Indicators of working with Windows Registry"
  },
  "code-patterns": {
    "invokeRootUser": [{ "op": "STARTS_WITH invoke", "args": "STARTS_WITH java/util/prefs/Preferences.userRoot()" }],
    "invokeRootSysm": [{ "op": "STARTS_WITH invoke", "args": "STARTS_WITH java/util/prefs/Preferences.systemRoot()" }]
  },
  "code-behaviors": {
    "lookupMethod": {
      "location": { "class": "EQUALS java/lang/Class", "mname": "EQUALS getDeclaredMethod" },
      "condition": { "ANY": [
        { "index": 1, "match": "EQUALS WindowsRegOpenKey" },
        { "index": 1, "match": "EQUALS WindowsRegCloseKey" },
        { "index": 1, "match": "EQUALS WindowsRegQueryValueEx" },
        { "index": 1, "match": "EQUALS WindowsRegEnumValue" },
        { "index": 1, "match": "EQUALS WindowsRegEnumKeyEx" },
        { "index": 1, "match": "EQUALS WindowsRegSetValueEx" },
        { "index": 1, "match": "EQUALS WindowsRegDeleteValue" },
        { "index": 1, "match": "EQUALS WindowsRegDeleteKey" }
      ]}
    }
  }
}

PR includes:

• Models to support dynamic signatures
• Basic plugging into the existing SSVM pipeline

PR does not include:

• Implementations for EntryPointDiscovery or CoverageEntryPointSupplier which are required for the dynamic scanner to actually work
  • That will be a future PR

[xyzeva]

Overall good, few changes needed here and there

[xyzeva]

LGTM