检索结果-内蒙古大学图书馆

2nd International Conference on Instrumentation and Measurement, Computer, Communication and control (IMCCC)

作者： Chen, Zhe Guo, Shize Fu, Damao North Elect Equipments Res Inst Beijing Peoples R China

ISBN: (纸本)9780769549354

This paper presents a new automated directed fuzzing technique. First, the behavior information is extracted from the original complex control flow graph (CFG) by using the dynamic symbolic execution. Then, the case theory is used to establish the access control model for the access objects. Subsequently, to describe some access properties of the objects while a program is running, we present a control flow based Extended Program Behavior model with Finite-State Machine controlled parameters (EPBFSM) by adding constraints to the control flow model. Finally, the new fuzzed inputs are generated by resolving the constraints resulting from the EPBFSM. By combining the program behavior with the security model, we can find not only the possible path-aware vulnerabilities but also the possible access control objects-aware vulnerabilities.

关键词： directed fuzzing control flow graph dynamic symbolic execution access control model extended program behavior model finite-state machine

来源：评论

学校读者我要写书评

暂无评论

Detection and analysis of iterative behavior in parallel applications

引用

8th International Conference on Computational Science

作者： Fuerlinger, Karl Moore, Shirley Univ Tennessee Dept Elect Engn & Comp Sci Knoxville TN 37996 USA

ISBN: (纸本)9783540693888

Many applications exhibit iterative and phase based behavior. We present an approach to detect and analyze iteration phases in applications by recording the control flow graph of the application and analyzing it for loops that represent iterations. Phases are then manually marked and performance profiles are captured in alignment with the iterations. By analyzing: how profiles change between capture points, differences in execution behavior between iterations can be uncovered.

关键词： phase detection control flow graph continuous profiling

来源：评论

学校读者我要写书评

暂无评论

Automatic Identification of Use Cases from Codes: A User’s Goal Driven Approach

引用

Wuhan University Journal of Natural Sciences 2009年第5期14卷 409-414页

作者： ZHOU Xiaoyu QIAN Ju CHEN Lin XU Baowen School of Computer Science and Engineering Southeast University Nanjing 211189 Jiangsu China College of Information Science and Technology Nanjing University of Aeronautics and Astronautics Nanjing 210016 Jiangsu China Department of Computer Science and Technology Nanjing University Nanjing 210093 Jiangsu China

Based on the different roles played by base flow and alternative flow in the process to achieve user＇s goals, we have found that loop structure is frequently used to implement alternative flow and/or to connect different use cases. This paper presents an approach to identify base flows and alternative flows of different use cases by traversing control flow graph in which back edges are eliminated. The effectiveness of the approach is verified by identification of the use case structure of an ATM system. The workload of human intervention of the approach is relatively slight, and the manner of human intervention closely follows the usual process of software comprehension.

关键词： use case identification control flow graph program analysis reverse engineering unified modeling language (UML)

来源：评论

学校读者我要写书评

暂无评论

Optimal Test Sequence Generation using River Formation Dynamics 5

Optimal Test Sequence Generation using River Formation Dynam...

引用

5th International Conference System Modeling and Advancement in Research Trends (SMART)

作者： khatri, Yogita Sharma, Abhilasha Kumar, Akshi Delhi Technol Univ CSE Dept New Delhi India

ISBN: (纸本)9781509035434

Software testing is a complex and exhaustive process, often limited by the resources. Although many approaches for test sequence generation exist in the literature, but none of it is ideal as far as coverage and redundancy is concerned. This paper aims at improving the efficiency of software testing process by generating the optimal test sequences in the control flow graph (CFG) of the program under test (PUT) by using a novel swarm intelligence method called River Formation Dynamics(RFD). RFD is inspired by a natural phenomenon of how drops transformed into river and river into sea. It provides full path coverage with zero edge/transition redundancy. It also tries to prioritize the paths based on their strength, calculated in terms of their traversal by the drops.

关键词： Cyclometic Complexity control flow graph River Formation Dynamics Test Sequence Program Under Test

来源：评论

学校读者我要写书评

暂无评论

Advanced Malware Variant Detection Algorithm Using Structural Characteristic of Executable File

Advanced Malware Variant Detection Algorithm Using Structura...

引用

3rd International Conference on Future Generation Information Technology

作者： Shin, Donghwi Lee, Kwangwoo Won, Dongho Sungkyunkwan Univ Sch Informat & Commun Engn Informat Secur Grp Suwon 440746 Gyeonggi Do South Korea

ISBN: (纸本)9783642271410

The malware is not the strange word. As much again the threat and number of malware is raising. However we and vendors do not arrange these malwares. They store these malware. The reason is the number is so many and the detail analysis is impossible. Therefore some researchers or vendor implemented the behavior based analysis system. However, these systems just analyze malware and do not arrangement. Although there are some arrangement or detection algorithms, there are just results of paper and are not implemented. In this paper, we propose the more available algorithm. The proposed algorithm is the updated version of the CFG (control flow graph) based algorithm.

关键词： Malware control flow graph CFG

来源：评论

学校读者我要写书评

暂无评论

PHP Vulnerability Detection Based on Taint Analysis 6

PHP Vulnerability Detection Based on Taint Analysis

引用

6th International Conference on Reliability, Infocom Technologies and Optimization (Trends and Future Directions) (ICRITO)

作者： Cao, Kai He, Jing Fan, Wenqing Huang, Wei Chen, Lei Pan, Yue Commun Univ China Fac Sci & Technol Beijing Peoples R China

ISBN: (纸本)9781509030125

To detect the vulnerabilities of Web applications which based on the PHP scripting language. This paper proposes a PHP vulnerability detection method based on fine-grained taint analysis algorithm. First of all, this article generates the Abstract Syntax Tree by lexical and grammatical analysis on the PHP, and then produces the corresponding control flow graph. At last, performing taint analysis on the control flow graph. By tracking the program parameters, variables and other external input, marking the input type, propagating to various types of vulnerability function via the taint, and finally according to the tainted types of variable which are outputted to identify the vulnerabilities. We tested 16 programs of Damm Vulnerable Web App and found nine known vulnerabilities.

关键词： PHP Abstract Syntax Tree control flow graph Taint Analysis Vulnerability Detection

来源：评论

学校读者我要写书评

暂无评论

Path Executions of Java Bytecode Programs

Path Executions of Java Bytecode Programs

引用

International Conference on Advanced Computing and Intelligent Engineering (ICACIE)

作者： Soomro, Safeeullah Alansari, Zainab Belgaum, Mohammad Riyaz AMA Int Univ Coll Comp Studies Salmabad Bahrain Univ Malaya Kuala Lumpur Malaysia

ISBN: (纸本)9789811068751;9789811068744

Static analysis of programs is essential for better understanding towards software maintenance and re-engineering. Unfortunately, we still lack automatic tools to understand the back end of the programs (Bytecode). Developing these tools is very expensive and time-consuming task but it is today's need. Those tools may help to understand Java Bytecode. Some time source code is not available all the time but bytecode is easily available. Unfortunately, bytecode is not understandable by many of us so that we are providing a little effort in this regard. This article represents the program flow execution in Java Bytecode. We present static and dynamic path executions of programs in a bytecode using control flow graph (CFG) and Data Dependence graph (DDG). Bytecode analysis is an effort to develop a tool which can make visualization of Java programs in back end form.

关键词： Static analysis of programs Program dependence graph control flow graph Software testing and maintenance

来源：评论

学校读者我要写书评

暂无评论

COBREX: A Tool for Extracting Business Rules from COBOL 39

COBREX: A Tool for Extracting Business Rules from COBOL

引用

39th IEEE International Conference on Software Maintenance and Evolution (ICSME)

作者： Ali, Mir Sameed Manjunath, Nikhil Chimalakonda, Sridhar Indian Inst Technol Tirupati Dept Comp Sci & Engn Res Intelligent Software & Human Analyt RISHA Lab Tirupati Andhra Pradesh India

ISBN: (数字)9781665479561

ISBN: (纸本)9781665479561

COBOL (Common Business-Oriented Language) has had a strong presence for the last five decades and is still prevalent in the finance and banking sectors and other organizations. The systems which were earlier written in COBOL have now become legacy systems. Therefore, it has become essential to maintain and migrate these legacy COBOL systems. These legacy systems on which companies rely consist of embedded logic to run their business rules and day-to-day operations. Due to everchanging requirements, these business rules need to be revisited and updated regularly. Understanding the code that enforces the business rules is critical for system evolution. However, this is time-consuming, laborious, and error-prone. Also, the documentation of these systems is sometimes inadequate and may be inconsistent with current organizational policies. Furthermore, the number of current-age developers working on COBOL has been drastically reduced, and they are mainly unfamiliar with legacy systems. To aid this, we propose a tool called COBREX to extract COBOL business rules using a CFG-based approach. The tool's main aim is to help the researchers and practitioners to understand COBOL source code by extracting and comprehending the business rules. The demo of the tool can be found here - https://***/3QODmOkISL0 and the details of the tool can be found here - https://***/COBREXdoc/.

关键词： business rules control flow graph legacy systems COBOL

来源：评论

学校读者我要写书评

暂无评论

Scope of Selection Nodes in Object Oriented Programs 40

Scope of Selection Nodes in Object Oriented Programs

引用

40th Annual IEEE Computer Software and Applications Conference Symposium (COMPSAC) / Symposium on Software Engineering Technology and Applications (SETA)

作者： Alrasheed, Hend Melton, Austin Kent State Univ Dept Comp Sci Kent OH 44242 USA

ISBN: (纸本)9781467388450

Many complexity measures have been introduced to capture different aspects of code complexity. A factor that (in most cases) increases the difficulty of code is the excessive use of nesting constructs. In this work, we examine the difficulty created by nesting constructs in object oriented programs. We concentrate on measuring the scope of predicate (selection) statements within a method and between different methods by employing a new model named the control call inheritance graph (CCI). Unlike classic control flow graphs, the CCI graph captures the flow of control between the different statements of a method, between the different statements of different methods, and the flow created by inheritance relationships among different classes.

关键词： nesting object oriented program program complexity control flow graph selection statement selection node scope of a selection node

来源：评论

学校读者我要写书评

暂无评论

Profitability computations on program flow graphs

引用

Computers and Mathematics with Applications 1976年第2期2卷 145-159页

作者： Cocke, John Kennedy, Ken IBM Thomas J. Watson Research Center Yorktown Heights NY 10598 United States Department of Mathematical Sciences Rice University Houston TX 77001 United States

The "profitability" of code optimizations is defined in terms of a Markov model of program flow. A system of linear equations for the expected frequency of execution of blocks of a program is derived. A solution method which uses "Cocke-Allen interval" analysis is presented and extensions of this method to other global flow analysis problems are described. © 1976.

关键词： Cocke-Allen intervals Compilers control flow graph expected frequency flow graph reducibility graph theory Markov chains optimization of compiled code partial ordering profitability program analysis sparse matrix inversion topological sort

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：