检索结果-内蒙古大学图书馆

Access Control Mechanisms in java Applications 43rd

学校读者我要写书评

暂无评论

Access Control Mechanisms in Java Applications

43rd IBIMA Conference on Artificial intelligence and Machine Learning, IBIMA-AI 2024

作者： Krawiec, Jerzy Górny, Piotr Kiedrowicz, Maciej Gepner, Pawel Moroz, Leonid Warsaw University of Technology Warsaw Poland Military University of Technology Warsaw Poland

ISBN: (纸本)9783031790850

The article analyzes the main security functions implemented in the JDK in the context of access control mechanisms. Due to more frequent updates introduced in the java platform, the problem of ensuring backward compatibility arises. The research carried out using the SecurityManager and AccessControl classes shows that the solution to this problem can be achieved through the synergy of the SecurityManager class acting as a central access control point and the AccessControl class ensuring the implementation of an access control algorithm with unique functions. This solution also enables application flexibility when implementing a multi-level security model. © The Author(s), under exclusive license to Springer Nature Switzerland AG 2025.

关键词： java programming language

SBFT Tool Competition 2025 - java Test Case Generation Track

学校读者我要写书评

暂无评论

arXiv 2025年

作者： Kifetew, Fitsum Yun, Lin Prandi, Davide Software Engineering Unit Fondazione Burno Kessler Trento Italy Department of Computer Science and Engineering Shanghai Jiao Tong University Shanghai China

This short report presents the 2025 edition of the java Unit Testing Competition in which four test generation tools (EVOFUZZ, EVOSUITE, BBC, and RANDOOP) were bench-marked on a freshly selected set of 55 java classes from six different open source projects. The benchmarking was based on structural metrics, such as code and mutation coverage of the classes under test, as well as on the readability of the generated test cases. © 2025, CC BY.

关键词： java programming language

Studying Vulnerable Code Entities in R

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Zhao, Zixiao Das, Millon Madhur Fard, Fatemeh H. University of British Columbia KelownaBC Canada Indian Institute of Technology WB Kharagpur India

Pre-trained Code language Models (Code-PLMs) have shown many advancements and achieved state-of-the-art results for many software engineering tasks in the past few years. These models are mainly targeted for popular programming languages such as java and Python, leaving out many other ones like R. Though R has a wide community of developers and users, there is little known about the applicability of Code-PLMs for R. In this preliminary study, we aim to investigate the vulnerability of Code-PLMs for code entities in R. For this purpose, we use an R dataset of code and comment pairs and then apply CodeAttack, a black-box attack model that uses the structure of code to generate adversarial code samples. We investigate how the model can attack different entities in R. This is the first step towards understanding the importance of R token types, compared to popular programming languages (e.g., java). We limit our study to code summarization. Our results show that the most vulnerable code entity is the identifier, followed by some syntax tokens specific to R. The results can shed light on the importance of token types and help in developing models for code summarization and method name prediction for the R language. © 2024, CC BY.

关键词： java programming language

java-Class-Hijack: Software Supply Chain Attack for java based on Maven Dependency Resolution and java Classloading

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Bono, Federico Reyes, Frank Sharma, Aman Baudry, Benoit Monperrus, Martin KTH Royal Institute of Technology Stockholm Sweden Universtité de Montréal Montréal Canada

We introduce java-Class-Hijack, a novel software supply chain attack that enables an attacker to inject malicious code by crafting a class that shadows a legitimate class that is in the dependency tree. We describe the attack, provide a proof-of-concept demonstrating its feasibility, and replicate it in the German Corona-Warn-App server application. The proof-of-concept illustrates how a transitive dependency deep within the dependency tree can hijack a class from a direct dependency and entirely alter its behavior, posing a significant security risk to java applications. The replication on the Corona-Warn-App demonstrates how compromising a small JSON validation library could result in a complete database takeover. Copyright © 2024, The Authors. All rights reserved.

关键词： java programming language

Using java Geometry Expert as Guide in the Preparations for Math Contests

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Ganglmayr, Ines Kovács, Zoltán The Private University College of Education of the Diocese of Linz Austria

We give an insight into java Geometry Expert (JGEX) in use in a school context, focusing on the Austrian school system. JGEX can offer great support in some classroom situations, especially for solving mathematical co... 详细信息

关键词： java programming language

Development and Benchmarking of Multilingual Code Clone Detector

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Zhu, Wenqing Yoshida, Norihiro Kamiya, Toshihiro Choi, Eunjong Takada, Hiroaki Graduate School of Informatics Nagoya University Furo-cho Chikusa-ward Aichi Nagoya464-8601 Japan Graduate School of Information Science and Engineering Ritsumeikan University 1-1-1 Noji-higashi Kusatsu Shiga525-8577 Japan Interdisciplinary Faculty of Science and Engineering Shimane University 1060 Nishikawatsu-cho Shimane Matsue690-8504 Japan Faculty of Information and Human Sciences Kyoto Institute of Technology Matsugasaki Sakyo-ku Kyoto606-8585 Japan

The diversity of programming languages is growing, making the language extensibility of code clone detectors crucial. However, this is challenging for most existing clone detection detectors because the source code handler needs modifications, which requires specialist-level knowledge of the targeted language and is time-consuming. Multilingual code clone detectors make it easier to add new language support by providing syntax information of the target language only. To address the shortcomings of existing multilingual detectors for language scalability and detection performance, we propose a multilingual code block extraction method based on ANTLR parser generation, and implement a multilingual code clone detector (MSCCD), which supports the most significant number of languages currently available and has the ability to detect Type-3 code clones. We follow the methodology of previous studies to evaluate the detection performance of the java language. Compared to ten state-of-the-art detectors, MSCCD performs at an average level while it also supports a significantly larger number of languages. Furthermore, we propose the first multilingual syntactic code clone evaluation benchmark based on the CodeNet database. Our results reveal that even when applying the same detection approach, performance can vary markedly depending on the language of the source code under investigation. Overall, MSCCD is the most balanced one among the evaluated tools when considering detection performance and language extensibility. © 2024, CC BY-NC-ND.

关键词： java programming language

Dynamic Taint Tracking using Partial Instrumentation for java Applications

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Thakur, Manoj RameshChandra University of California Los Angeles United States

Dynamic taint tracking is the process of assigning label to variables in a program and then tracking the flow of the labels as the program executes. Dynamic taint tracking for java applications is achieved by instrumenting the application ie. adding parallel variable for each actual variable of the program and inserting additional bytecode instructions to track the flow of the parallel variables. In this paper we suggest partial instrumentation to achieve dynamic taint tracking with reasonable runtime overhead. Partial instrumentation involves instrumenting only parts of a java application, which are within the scope of a predefined source and sink set. Partial instrumentation is performed at the granularity level of a method. We use PetaBlox[2], a large-scale software analysis tool, which internally uses Datalog[3], to perform static analysis and infers all the methods within the scope of source and sink sets and a modified version of Phosphor[1] to achieve partial instrumentation. Test runs performed on some of the Dacapo benchmarks[5] show a significant performance improvement over the version of Phosphor that performs complete instrumentation. © 2024, CC0.

关键词： java programming language

Cross-language Dependencies: An Empirical Study of Kotlin-java

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Feng, Qiong Ji, Huan Ma, Xiaotian Liang, Peng Nanjing University of Science and Technology Nanjing China Wuhan University Wuhan China

Background: Since Google introduced Kotlin as an official programming language for developing Android apps in 2017, Kotlin has gained widespread adoption in Android development. The interoperability of java and Kotlin’s design nature allows them to coexist and interact with each other smoothly within a project. Aims: However, there is limited research on how java and Kotlin interact with each other in real-world projects and what challenges are faced during these interactions. The answers to these questions are key to understanding these kinds of cross-language software systems. Methods: In this paper, we implemented a tool named DependExtractor, which can extract 11 kinds of Kotlin-java dependencies, and conducted an empirical study of 23 Kotlin-java real-world projects with 3,227 java and 8,630 Kotlin source files. Results: Our findings revealed that java and Kotlin frequently interact with each other in these cross-language projects, with access and call dependency types being the most dominant. Compared to files interacting with other files in the same language, java/Kotlin source files, which participate in the cross-language interactions, undergo more commits. Additionally, among all Kotlin-java problematic interactions, we identified seven common mistakes, along with their fixing strategies. Conclusions: The findings of this study can help developers understand and address the challenges in Kotlin-java projects. © 2024, CC BY.

关键词： java programming language

Verifying Functional Correctness Properties At the Level of java Bytecode

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Paganoni, Marco Furia, Carlo A. Software Institute USI Università della Svizzera italiana Lugano Switzerland

The breakneck evolution of modern programming languages aggravates the development of deductive verification tools, which struggle to timely and fully support all new language features. To address this challenge, we present BYTEBACK: a verification technique that works on java bytecode. Compared to high-level languages, intermediate representations such as bytecode offer a much more limited and stable set of features;hence, they may help decouple the verification process from changes in the source-level language. BYTEBACK offers a library to specify functional correctness properties at the level of the source code, so that the bytecode is only used as an intermediate representation that the end user does not need to work with. Then, BYTEBACK reconstructs some of the information about types and expressions that is erased during compilation into bytecode but is necessary to correctly perform verification. Our experiments with an implementation of BYTEBACK demonstrate that it can successfully verify bytecode compiled from different versions of java, and including several modern language features that even state-of-the-art java verifiers (such as KeY and OpenJML) do not directly support—thus revealing how BYTEBACK’s approach can help keep up verification technology with language evolution. Copyright © 2024, The Authors. All rights reserved.

关键词： java programming language