检索结果-内蒙古大学图书馆

8th ieee International working conference on source code analysis and manipulation

作者： German, Daniel M. Hassan, Ahmed E. Robles, Gregorio Univ Victoria Dept Comp Sci Victoria BC V8W 2Y2 Canada Queens Univ Sch Comp Kingston ON K7L 3N6 Canada

ISBN: (纸本)9780769533537

The source code of a software system is in constant change. The impact of these changes spreads out across the software system and may lead to the sudden manifestation of failures in unchanged parts. To help developers fix such failures, we propose a method that, in a pre-processing stage. analyzes prior code changes to determine what functions have been modified. Next, given a particular period of time in the past, the functions changed during that period are propagated throughout the rest of the system using the dependence graph of the system. This information is visualized using Change Impact Graphs (CIGs). Through a case study based on the Apache Web Server, we demonstrate the benefit of using CIGs to investigate several real defects. (C) 2009 Elsevier B.V. All rights reserved.

关键词： Change impact graph Defect detection code changes Software evolution

来源：评论

学校读者我要写书评

暂无评论

Combining conceptual and domain-based couplings to detect database and code dependencies

Combining conceptual and domain-based couplings to detect da...

引用

2012 ieee 12th International working conference on source code analysis and manipulation, SCAM 2012

作者： Gethers, Malcom Aryani, Amir Poshyvanyk, Denys College of William and Mary United States RMIT University Australia

ISBN: (纸本)9780769547831

Knowledge of software dependencies plays an important role in program comprehension and other maintenance activities. Traditionally, dependencies are derived by source code analysis, however, such an approach can be difficult to use in multi-tier hybrid software systems, or legacy applications where conventional code analysis tools simply do not work as is. In this paper, we propose a hybrid approach to detecting software dependencies by combining conceptual and domain-based coupling metrics. In recent years, a great deal of research focused on deriving various coupling metrics from these sources of information with the aim of assisting software maintainers. Conceptual metrics specify underlying relationships encoded by developers in identifiers and comments of source code classes whereas domain metrics exploit coupling manifested in domain-level information of software components and it is independent from software implementation. The proposed approach is independent from programming language, as such it can be used in multi-tier hybrid systems or legacy applications. We report the results of an empirical case study on a large-scale enterprise system where we demonstrate that the combined approach is able to detect database and source code dependencies with higher precision and recall as compared to its standalone constituents. © 2012 ieee.

关键词： Hybrid systems

来源：评论

学校读者我要写书评

暂无评论

Explaining Transformer-based code Models: What Do They Learn? When They Do Not Work? 23

Explaining Transformer-based Code Models: What Do They Learn...

引用

23rd ieee International working conference on source code analysis and manipulation, SCAM 2023

作者： Mohammadkhani, Ahmad Haji Tantithamthavorn, Chakkrit Hemmatif, Hadi University of Calgary Calgary Canada Monash University Melbourne Australia York University Toronto Canada

ISBN: (纸本)9798350305067

In recent years, there has been a wide interest in designing deep neural network-based models that automate downstream software engineering tasks on source code, such as code document generation, code search, and program repair. Although the main objective of these studies is to improve the effectiveness of the downstream task, many studies only attempt to employ the next best neural network model, without a proper in-depth analysis of why a particular solution works or does not, on particular tasks or scenarios. In this paper, using an example eXplainable AI (XAI) method (attention mechanism), we study two recent large language models (LLMs) for code (codeBERT and GraphcodeBERT) on a set of software engineering downstream tasks: code document generation (CDG), code refinement (CR), and code translation (CT). Through quantitative and qualitative studies, we identify what codeBERT and GraphcodeBERT learn (put the highest attention on, in terms of source code token types), on these tasks. We also show some of the common patterns when the model does not work as expected (performs poorly even on easy problems) and suggest recommendations that may alleviate the observed challenges. © 2023 ieee.

关键词： Deep neural networks

来源：评论

学校读者我要写书评

暂无评论

A study on the effects of exception usage in open-source C++ systems 19

A study on the effects of exception usage in open-source C++...

引用

19th ieee International working conference on source code analysis and manipulation, SCAM 2019

作者： Bradley, Kirsten Godfrey, Michael David R. Cheriton School of Computer Science University of Waterloo WaterlooON Canada

ISBN: (纸本)9781728149370

Exception handling (EH) is a feature common to many modern programming languages, including C++, Java, and Python, that allows error handling in client code to be performed in a way that is both systematic and largely detached from the implementation of the main functionality. However, C++ developers sometimes choose not to use EH, as they feel that its use increases complexity of the resulting code: new control flow paths are added to the code, 'stack unwinding' adds extra responsibilities for the developer to worry about, and EH arguably detracts from the modular design of the system. In this paper, we perform an exploratory empirical study of the effects of exceptions usage in 2721 open source C++ systems taken from GitHub. We observed that the number of edges in an augmented call graph increases, on average, by 22% when edges for exception flow are added to a graph. Additionally, about 8 out of 9 functions that may throw only do so by propagating a throw from another function. These results suggest that, in practice, the use of C++ EH can add complexity to the design of the system that developers must strive to be aware of. © 2019 ieee.

关键词： Static analysis

来源：评论

学校读者我要写书评

暂无评论

User-Input Dependence analysis via Graph Reachability

User-Input Dependence Analysis via Graph Reachability

引用

8th ieee International working conference on source code analysis and manipulation

作者： Scholz, Bernhard Zhang, Chenyi Cifuentes, Cristina Univ Sydney Sydney NSW 2006 Australia Sun Microsyst Labs Brisbane Qld Australia

ISBN: (纸本)9780769533537

Bug-checking tools have been used with some success in recent years to find bugs in software. For finding bugs that can cause security, vulnerabilities, bug checking tools require a program analysis which determines whether a software bug can be controlled by user-input. In this paper we introduce a static program analysis for computing user-input dependencies. This analysis can be used as a pre-processing filter to a static bug checking tool for identifying bugs that can potentially be exploited as security vulnerabilities. In order for the analysis to be applicable to large commercial software in the millions of lines of code, runtime speed and scalability of the user-input dependence analysis is of key importance. Our user-input dependence analysis takes both data and control dependencies into account. We extend Static Single Assignment (SSA) form by augmenting phi-nodes with control dependencies. A formal definition of user-input dependence is expressed in a dataflow analysis framework as a Meet-Over-all-Paths (MOP) solution. We reduce the equation system to a sparse equation system exploiting the properties of SSA. The sparse equation system is solved as a reachability problem that results in a fast algorithm for computing user-input dependencies. We have implemented a call-insensitive and a call-sensitive analysis. The paper gives preliminary results on the comparison of their efficiency for various benchmarks.

关键词： Data flow analysis

来源：评论

学校读者我要写书评

暂无评论

Modeling the Effects of Global Variables in Data-Flow analysis for C/C++ 21

Modeling the Effects of Global Variables in Data-Flow Analys...

引用

21st ieee International working conference on source code analysis and manipulation, SCAM 2021

作者： Schubert, Philipp Dominik Sattler, Florian Schiebel, Fabian Hermann, Ben Bodden, Eric Paderborn University Paderborn Germany Saarland University Saarbrücken Germany Fraunhofer IEM Paderborn Germany Technische Universität Dortmund Dortmund Germany

ISBN: (纸本)9781665448970

Global variables make software systems hard to maintain and debug, and break local reasoning. They also impose a non-Trivial challenge to static analysis which needs to model its effects to obtain sound analysis results. However, global variable initialization, codes of corresponding constructors and destructors as well as dynamic library code executed during load and unload not only affect control flows but data flows, too. The PhASAR static data-flow analysis framework does not handle these special cases and also does not provide any functionalities to model the effects of globals. analysis writers are forced to model the desired effects in an ad-hoc manner increasing an analysis' complexity and imposing an additional repetitive task. In this paper, we present the challenges of modeling globals, elaborate on the impact they have on analysis information, and present a suitable model to capture their effects, allowing for an easier development of global-Aware static data-flow analyses. We present an implementation of our model within the PhASAR framework and show its usefulness for an IDE-based linear-constant propagation that crucially requires correct modeling of globals for correctness. © 2021 ieee.

关键词： Static analysis

来源：评论

学校读者我要写书评

暂无评论

Evaluating Key Statements analysis

Evaluating Key Statements Analysis

引用

8th ieee International working conference on source code analysis and manipulation

作者： Binkley, David Gold, Nicolas Harman, Mark Li, Zheng Mahdavi, Kiarash Kings Coll London CREST Ctr Dept Comp Sci Strand London WC2R 2LS England

ISBN: (纸本)9780769533537

Key Statement analysis extracts from a program, statements that form the core of the program's computation. A good set of key statements is small but has a large impact. Key statements form a useful starting point for understanding and manipulating a program. An empirical investigation of three kinds of key statements is presented. The three are based on Bieman and Ott's principal variables. To be effective, the key statements must have high impact and form a small, highly cohesive unit. Using a minor improvement of metrics for measuring impact and cohesion, key statements are shown to capture about 75% of the semantic effect of the function from which they are drawn. At the same time, they have cohesion about 20 percentage points higher than the corresponding function. A statistical analysis of the differences shows that key statements have higher average impact and higher average cohesion (p < 0.001).

关键词： Program Slicing Principal Variables Impact Cohesion

来源：评论

学校读者我要写书评

暂无评论

Cross-language code analysis and refactoring

Cross-language code analysis and refactoring

引用

2012 ieee 12th International working conference on source code analysis and manipulation, SCAM 2012

作者： Mayer, Philip Schroeder, Andreas Department of Programming and Software Engineering Institute for Computer Science Ludwig-Maximilians-Universität München Germany

ISBN: (纸本)9780769547831

Software composed of artifacts written in multiple (programming) languages is pervasive in today's enterprise, desktop, and mobile applications. Since they form one system, artifacts from different languages reference one another, thus creating what we call semantic cross-language links. By their very nature, such links are out of scope of the individual programming language, they are ignored by most language-specific tools and are often only established - and checked for errors - at runtime. This is unfortunate since it requires additional testing, leads to brittle code, and lessens maintainability. In this paper, we advocate a generic approach to understanding, analyzing and refactoring cross-language code by explicitly specifying and exploiting semantic links with the aim of giving developers the same amount of control over and confidence in multi-language programs they have for single-language code today. © 2012 ieee.

关键词： Semantics

来源：评论

学校读者我要写书评

暂无评论

[Engineering] ENYPD-Entry Points Detector Jakarta Server Faces Use Case

[Engineering] ENYPD-Entry Points Detector Jakarta Server Fac...

引用

21st ieee International working conference on source code analysis and manipulation (SCAM)

作者： Nguempnang, Rodrigue Wete Berger, Bernhard J. Sohr, Karsten Univ Bremen Bremen Germany

ISBN: (纸本)9781665448970

Which parts of a software system can be accessed by an attacker is a common question in software security. The answer to this question defines where to look for input validation vulnerabilities, which parts of a system to respect during Microsoft's Threat Modeling, or how to calculate security metrics. Identifying entry points of an application is, therefore, a frequently occurring problem. Additionally, identifying entry points is relevant when analysing many framework-based applications since they no longer have a simple main method. While different analyses implement entry point detection, the presented tool ENYPD explicitly focuses on answering this question for Java-based systems in an analysis-independent manner. It extracts information on entry points statically and persists this information to a separate file. Therefore, it allows reusing the information in different analyses, and researchers do not need to implement a custom entry point detection for each analysis. The presented tool is explained using Jakarta Server Faces, a user-interface technology for Web-based business applications implemented using Java. The paper presents the implemented extraction approach, the internal data model, and the results stored. Finally, in an evaluation, the statically assessed results of ENYPD are compared to a dynamically determined set of entry points. This comparison allows us to demonstrate the correctness of the extracted information.

关键词： static analysis reverse engineering entry point call graph

来源：评论

学校读者我要写书评

暂无评论

GitHub, Technical Debt, code Formatting, and More

引用

ieee SOFTWARE 2017年第2期34卷 105-107页

作者： Carver, Jeffrey C. Cabot, Jordi Capilla, Rafael Muccini, Henry Univ Alabama Dept Comp Sci Tuscaloosa AL 35487 USA ICREA Catalan Inst Res & Adv Studies Interdisciplinary Internet Inst Barcelona Spain Rey Juan Carlos Univ Comp Sci Madrid Spain Univ Aquila Software Engn Informat Engn & Comp Sci & Math Dept Laquila Italy

This issue's column reports on papers from the 19th International conference on Model Driven Engineering Languages and Systems, the 2016 ACM SIGPLAN International conference on Software Language Engineering, the 12th International ACM SIGSOFT conference on the Quality of Software Architectures, and the 13th working ieee/IFIP conference on Software Architecture. Topics discussed include GitHub and open source, technical debt in model-driven engineering, a universal code formatter, assuring architectural quality, and continuous architecting.

关键词： Git Hub Open source UML Technical Debt code Smells Model Driven Engineering code Formatting Machine Learning AQAF Architecture Quality Assurance Framework AADL Architecture analysis And Design Language Architectural Quality Continuous Architecting CAFFEA Continuous Architecture Framework For Embedded And Agile Software Development Software Engineering Software Development

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：