The invention discloses a data mining method and system, a data processing method and system. The method comprises the following steps: extracting a to-be-mined assembly instruction character string subjected to initialization of an infection source from a to-be-analyzed file, a to-be-analyzed function name and a parameter list which are acquired in advance; obtaining an infection record in the assembly instruction character string; and generating a vulnerability report according to the infection record. According to the method and the device, the technical problems that any variable at any moment or any stage in any execution flow of the program is expressed by using controllable input parameters outside the program, and stack overflow type vulnerabilities are accurately found on the basis of the variable are solved.