diff --git a/demo/sectest/static_patch_scan/2022-11/OpenHarmony-SA-2022-1101.yara b/demo/sectest/static_patch_scan/2022-11/OpenHarmony-SA-2022-1101.yara
new file mode 100644
index 0000000000000000000000000000000000000000..7729a4bbb395a65db89cee405dcb5e7c3c549074
--- /dev/null
+++ b/demo/sectest/static_patch_scan/2022-11/OpenHarmony-SA-2022-1101.yara
@@ -0,0 +1,37 @@
+/* 
+ * Copyright (c) 2023 Huawei Device Co., Ltd.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import "console"
+import "elf"
+
+
+rule OpenHarmony_SA_2022_1101
+{
+    meta:
+    	date = "2023-03-02"
+    	openharmony_sa = "OpenHarmony-SA-2022-1101"
+    	cve = "CVE-2022-43451"
+    	severity = "high"
+    	affacted_files = "nwebspawn"
+    	affected_func = "main"
+    	
+    strings:
+        $features = "strncpy_s appspawn server name error" nocase wide ascii
+
+    condition:
+        (elf.machine == elf.EM_ARM) and $features and console.log("OpenHarmony-SA-2022-1101 testcase pass")
+        
+}