检索结果-内蒙古大学图书馆

2012 ieee 12th International working conference on source code analysis and manipulation, SCAM 2012

作者： Gutzmann, Tobias Lundberg, Jonas Löwe, Welf School of Computer Science Physics and Mathematics Linnaeus University Växjö Sweden

ISBN: (纸本)9780769547831

Points-to information is the basis for many analyses and transformations, e.g., for program understanding and optimization. Collections frameworks are part of most modern programming languages' infrastructures and used by many applications. The richness of features and the inherent structure of collection classes affect both performance and precision of points-to analysis negatively. In this paper, we discuss how to replace original collections frameworks with versions specialized for points-to analysis. We implement such a replacement for the Java Collections Framework and support its benefits for points-to analysis by applying it to three different points-to analysis implementations. In experiments, context-sensitive points-to analyses require, on average, 16-24% less time while at the same time being more precise. Context-insensitive analysis in conjunction with in lining also benefits in both precision and analysis cost. © 2012 ieee.

关键词： Data flow analysis

来源：评论

学校读者我要写书评

暂无评论

Proteum/FL: A tool for localizing faults using mutation analysis

Proteum/FL: A tool for localizing faults using mutation anal...

引用

2013 ieee 13th International working conference on source code analysis and manipulation, SCAM 2013

作者： Papadakis, Mike Delamaro, Marcio E. Traon, Yves Le University of Luxembourg Luxembourg Instituto de Ciências Matemáticas e de Computaçã o Universidade de São Paulo São Carlos SP Brazil

ISBN: (纸本)9781467357395

Fault diagnosis is the process of analyzing programs with the aim of identifying the code fragments that are faulty. It has been identified as one of the most expensive and time consuming tasks of software development. Even worst, this activity is usually accomplished based on manual analysis. To this end, automatic or semi-automatic fault diagnosis approaches are useful in assisting software developers. Hence, they can play an essential role in decreasing the overall development cost. This paper presents Proteum/FL, a mutation analysis tool for diagnosing previously detected faults. Given an ANSI-C program and a set of test cases, Proteum/FL returns a list of program statements ranked according to their likelihood of being faulty. The tool differs from the rest of the mutation analysis and fault diagnosis tools by employing mutation analysis as a means of diagnosing program faults. It therefore demonstrates the effective use of mutation in supporting both testing and debugging activities. © 2013 ieee.

关键词： Software testing

来源：评论

学校读者我要写书评

暂无评论

Change Pattern Detection for Optimising Incremental Static analysis 23

Change Pattern Detection for Optimising Incremental Static A...

引用

23rd ieee International working conference on source code analysis and manipulation, SCAM 2023

作者： Wauters, Cindy Plas, Jens Van Der Stievenart, Quentin Roover, Coen De Vrije Universiteit Brussel Brussels Belgium Université du Québec À Montréal Montréal Canada

ISBN: (纸本)9798350305067

Static analyses can be used by developers to compute properties of a program, enabling e.g., bug detection and program verification. However, reanalysing a program from scratch upon every change is time-consuming, especially in settings where code changes often, such as within IDEs. To avoid such full reanalyses, incremental analyses instead reuse parts of the previous analysis result, and reanalyse the changed code as necessary. While incrementality improves the analysis time, we introduce a complementary approach that further reduces the analysis time. A traditional incremental analysis updates previous analysis results without domain-specific knowledge. However, the effect of particular source code changes on analysis results can be predicted. Performing a traditional incremental analysis of the changed code might therefore be unnecessary. Instead, we propose to detect code change patterns of which the effect on analysis results can be predicted and to update these results accordingly, saving potentially expensive computations. In this paper, we explore the idea of adapting the analysis results for behaviour-preserving change patterns. In particular, we consider consistent renamings, inverted conditionals, and moved function definitions within Scheme programs. We implemented our approach and evaluated it on 30 programs. We show decreases in incremental analysis time between 3% and 99% on 25 programs that contain at least one behaviour-preserving change pattern. © 2023 ieee.

关键词： Static analysis

来源：评论

学校读者我要写书评

暂无评论

The Mind Is a Powerful Place: How Showing code Comprehensibility Metrics Influences code Understanding 21

The Mind Is a Powerful Place: How Showing Code Comprehensibi...

引用

43rd ieee/ACM International conference on Software Engineering - Software Engineering in Practice (ICSE-SEIP) / 43rd ACM/ieee International conference on Software Engineering - New Ideas and Emerging Results (ICSE-NIER)

作者： Wyrich, Marvin Preikschat, Andreas Graziotin, Daniel Wagner, Stefan Univ Stuttgart Inst Software Engn Stuttgart Germany

ISBN: (纸本)9780738113197

Static code analysis tools and integrated development environments present developers with quality-related software metrics, some of which describe the understandability of source code. Software metrics influence overarching strategic decisions that impact the future of companies and the prioritization of everyday software development tasks. Several software metrics, however, lack in validation: we just choose to trust that they reflect what they are supposed to measure. Some of them were even shown to not measure the quality aspects they intend to measure. Yet, they influence us through biases in our cognitive-driven actions. In particular, they might anchor us in our decisions. Whether the anchoring effect exists with software metrics has not been studied yet. We conducted a randomized and double-blind experiment to investigate the extent to which a displayed metric value for source code comprehensibility anchors developers in their subjective rating of source code comprehensibility, whether performance is affected by the anchoring effect when working on comprehension tasks, and which individual characteristics might play a role in the anchoring effect. We found that the displayed value of a comprehensibility metric has a significant and large anchoring effect on a developer's code comprehensibility rating. The effect does not seem to affect the time or correctness when working on comprehension questions related to the code snippets under study. Since the anchoring effect is one of the most robust cognitive biases, and we have limited understanding of the consequences of the demonstrated manipulation of developers by non-validated metrics, we call for an increased awareness of the responsibility in code quality reporting and for corresponding tools to be based on scientific evidence.

关键词： behavioral software engineering code comprehension placebo effect cognitive bias anchoring effect metrics

来源：评论

学校读者我要写书评

暂无评论

Trading-off security and performance in barrier slicing for remote software entrusting

引用

AUTOMATED SOFTWARE ENGINEERING 2009年第2期16卷 235-261页

作者： Ceccato, Mariano Preda, Mila Dalla Nagra, Jasvir Collberg, Christian Tonella, Paolo Fdn Bruno Kessler Trento Italy Univ Trent Trento Italy Univ Arizona Tucson AZ USA

Network applications often require that a trust relationship is established between a trusted host (e.g., the server) and an untrusted host (e.g., the client). The remote entrusting problem is the problem of ensuring the trusted host that whenever a request from an untrusted host is served, the requester is in a genuine state, unaffected by malicious modifications or attacks. Barrier slicing helps solve the remote entrusting problem. The computation of the sensitive client state is sliced and moved to the server, where it is not possible to tamper with it. However, this solution might involve unacceptable computation and communication costs for the server, especially when the slice to be moved is large. In this paper, we investigate the trade-off between security loss and performance overhead associated with moving only a portion of the barrier slice to the server and we show that this trade-off can be reduced to a multi-objective optimization problem. We describe how to make decisions in practice with reference to a case study, for which we show how to choose among the alternative options.

关键词： Program slicing Security source code transformation

来源：评论

学校读者我要写书评

暂无评论

INVocD: Identifier Name Vocabulary Dataset

INVocD: Identifier Name Vocabulary Dataset

引用

10th ieee working conference on Mining Software Repositories (MSR)

作者： Butler, Simon Wermelinger, Michel Yu, Yijun Sharp, Helen Open Univ Ctr Res Comp Dept Comp Milton Keynes Bucks England

ISBN: (纸本)9781479903450;9781467329361

INVocD is a database of the identifier name declarations and vocabulary found in 60 FLOSS Java projects where the source code structure is recorded and the identifier name vocabulary is made directly available, offering advantages for identifier name research over conventional source code models. The database has been used to support a range of research projects from identifier name analysis to concept location, and provides many opportunities to researchers. INVocD may be downloaded from http://***/36992

关键词： identifier names source code model source code mining

来源：评论

学校读者我要写书评

暂无评论

ACER: An AST-based Call Graph Generator Framework 23

ACER: An AST-based Call Graph Generator Framework

引用

23rd ieee International working conference on source code analysis and manipulation, SCAM 2023

作者： Chen, Andrew Yan, Yanfu Poshyvanyk, Denys William & Mary Computer Science Department Williamsburg United States

ISBN: (纸本)9798350305067

We introduce ACER, an AST-based call graph generator framework. ACER leverages tree-sitter to interface with any language. We opted to focus on generators that operate on abstract syntax trees (ASTs) due to their speed and simplicitly in certain scenarios;however, a fully quantified intermediate representation usually provides far better information at the cost of requiring compilation. To evaluate our framework, we created two context-insensitive Java generators and compared them to existing open-source Java ***: https://***/WM-SEMERU/ACER © 2023 ieee.

关键词： Static analysis

来源：评论

学校读者我要写书评

暂无评论

Applying the Universal Version History Concept to Help De-Risk Copy-Based code Reuse 23

Applying the Universal Version History Concept to Help De-Ri...

引用

23rd ieee International working conference on source code analysis and manipulation, SCAM 2023

作者： Reid, David Mockus, Audris University of Tennessee KnoxvilleTN United States

ISBN: (纸本)9798350305067

The ability to easily copy code among open source projects makes it difficult to comply with the need to determine the provenance of code essential for cybersecurity and for complying with the licensing terms. Such provenance encompasses the exact origin of each component and its license, and various qualities of the component, such as absence of vulnerabilities and high likelihood of future maintenance. With the aim to address these challenges, we created an approach supported by a tool prototype, UVHistory, that links each piece of source code to all projects where it resides and, also, to its version histories in all these projects. This combined version history of a file from all open source projects we refer to as universal version history. We exemplify UVHistory via scenarios illustrating how it can help developers identify bugs and vulnerabilities and verify that license terms are not violated. Specifically, using UVHistory, developers can find the origin of a file including the open source repository where it originated, follow the evolution of the file over time and across different repositories, identify which authors have worked on a file, and read all the log messages for any modifications to that file in any repository. We also evaluate UVHistory in two contexts: to identify license non-compliance and to find instances of unfixed vulnerabilities. We find that in active and popular projects both problems are common and anyone can easily identify them using our approach. © 2023 ieee.

关键词： Open source software

来源：评论

学校读者我要写书评

暂无评论

Do code Quality and Style Issues Differ Across (Non-)Machine Learning Notebooks? Yes! 23

Do Code Quality and Style Issues Differ Across (Non-)Machine...

引用

23rd ieee International working conference on source code analysis and manipulation, SCAM 2023

作者： Siddik, Md Saeed Bezemer, Cor-Paul University of Alberta Department of Electrical and Computer Engineering Canada

ISBN: (纸本)9798350305067

The popularity of computational notebooks is rapidly increasing because of their interactive code-output visualization and on-demand non-sequential code block execution. These notebook features have made notebooks especially popular with machine learning developers and data scientists. However, as prior work shows, notebooks generally contain low quality code. In this paper, we investigate whether the low quality code is inherent to the programming style in notebooks, or whether it is correlated with the use of machine learning techniques. We present a large-scale empirical analysis of 246,599 opensource notebooks to explore how machine learning code quality in Jupyter Notebooks differs from non-machine learning code, thereby focusing on code style issues. We explored code style issues across the Error, Convention, Warning, and Refactoring categories. We found that machine learning notebooks are of lower quality regarding PEP-8 code standards than non-machine learning notebooks, and their code quality distributions significantly differ with a small effect size. We identified several code style issues with large differences in occurrences between machine learning and non-machine learning notebooks. For example, package and import-related issues are more prevalent in machine learning notebooks. Our study shows that code quality and code style issues differ significantly across machine learning and non-machine learning notebooks. © 2023 ieee.

关键词： Machine learning

来源：评论

学校读者我要写书评

暂无评论

InputTracer: A data-flow analysis tool for manual program comprehension of x86 binaries

InputTracer: A data-flow analysis tool for manual program co...

引用

2012 ieee 12th International working conference on source code analysis and manipulation, SCAM 2012

作者： Kargén, Ulf Shahmehri, Nahid Department of Computer and Information Science Linköping University SE-58183 Linköping Sweden

ISBN: (纸本)9780769547831

Third-party security analysis of closed-source programs has become an important part of a defense-in-depth approach to software security for many companies. In the absence of efficient tools, the analysis has generally been performed through manual reverse engineering of the machine code. As reverse engineering is an extremely time-consuming and costly task, much research has been performed to develop more powerful methods for analysis of program binaries. One such popular method is dynamic taint analysis (DTA), which is a type of runtime data-flow analysis, where certain input data is marked as tainted. By tracking the flow of tainted data, DTA can, for instance, be used to determine which computations in a program are affected by a certain part of the input. In this paper we present Input Tracer, a tool that utilizes DTA for aiding in manual program comprehension and analysis of unmodified x86 executables running in Linux. A brief overview of dynamic taint analysis is given, followed by a description of the tool and its implementation. We also demonstrate the tool's ability to provide exact information on the origin of tainted data through a detailed use case, where the tool is used to find the root cause of a memory corruption bug. © 2012 ieee.

关键词： Reverse engineering

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：