检索结果-内蒙古大学图书馆

Challenging the Eye-Mind Link Hypothesis: Visualizing Gazes For Each programming Problem

学校读者我要写书评

暂无评论

arXiv 2025年

作者： Lopez, Michael T. Ateneo de Manila University Philippines

This investigates the relationship between eye fixation patterns and performance in java programming exercises using eye-tracking technology. Thirty-one students from a university in Metro Manila participated, and their eye movements were recorded while solving five java programming exercises (three of the five exercises were picked). The fixation data were preprocessed and visualized using heatmap bin graphs, dividing the participants into correct and wrong answer groups. The Mann-Whitney U Test was employed to determine if there were significant differences in the fixation patterns between the two groups. Copyright © 2025, The Authors. All rights reserved.

关键词： java programming language

DTVM: REVOLUTIONIZING SMART CONTRACT EXECUTION WITH DETERMINISM AND COMPATIBILITY

学校读者我要写书评

暂无评论

arXiv 2025年

作者： Zhou, Wei Wei, Changzheng Yan, Ying Tang, Wei Chen, Zhihao Xu, Xiong Huang, Xuebing Chen, Wengang Zhang, Jie Chen, Yang Zheng, Xiaofu Wu, Hanghang Chen, Shenglong Wang, Ermei Chen, Xiangfei Yu, Yang Wu, Meng Zhu, Tao Yuan, Liwei Yu, Feng Zhang, Alex Wang, Wei Luo, Ji He, Zhengyu Zhao, Wenbiao

We introduce the DeTerministic Virtual Machine (DTVM) Stack, a next-generation smart contract execution framework designed to address critical performance, determinism, and ecosystem compatibility challenges in blockchain networks. Building upon WebAssembly (Wasm) while maintaining full Ethereum Virtual Machine (EVM) ABI compatibility, DTVM introduces a Deterministic Middle Intermediate Representation (dMIR) and a hybrid lazy-JIT compilation engine that dynamically adapts optimization levels (O0∼O2) to balance compilation speed and execution efficiency. Beyond Wasm, DTVM further accommodates diverse instruction set architectures (e.g., EVM, RISC-V) through modular adaptation layers, translating their bytecode into the unified dMIR intermediate representation. This enables seamless integration with DTVM’s hybrid lazy-JIT compilation engine, which dynamically optimizes performance while preserving deterministic execution guarantees across heterogeneous environments. The key contributions including: 1). The framework achieves up to 2× acceleration over evmone in dominant Ethereum contract (e.g. ERC20/721/1155) execution and reduces fibonacci computation latency by 11.8∼40.5% compared to Wasm based VMs, while ensuring cross-architecture deterministic execution through hardware-enforced memory isolation and standardized trap handling. 2). A novel trampoline hot-switch mechanism enables sub-millisecond (0.95ms) post-deployment invocation times, outperforming up to about 23× in compilation and invocation efficiency comparing to the state-of-the-art Wasm (Wasmtime). 3). The solution supports multi-language development (Solidity, C++, Rust, java, Go, and AssemblyScript) through unified bytecode conversion while maintaining EVM ABI compatibility for seamless invocation. Additionally, it reduces machine code object sizes by 30.0∼72.6% compared to alternatives, coupled with a minimized Trusted Computing Base (69.5KLoC, 48% of Wasmtime) for secure execution environments. 4). DTV

关键词： java programming language

Canonicalization for Unreproducible Builds in java

学校读者我要写书评

暂无评论

arXiv 2025年

作者： Sharma, Aman Baudry, Benoit Monperrus, Martin KTH Royal Institute of Technology Stockholm Sweden Université de Montréal Montréal Canada

The increasing complexity of software supply chains and the rise of supply chain attacks have elevated concerns around software integrity. Users and stakeholders face significant challenges in validating that a given software artifact corresponds to its declared source. Reproducible Builds address this challenge by ensuring that independently performed builds from identical source code produce identical binaries. However, achieving reproducibility at scale remains difficult, especially in java, due to a range of non-deterministic factors and caveats in the build process. In this work, we focus on reproducibility in java-based software, archetypal of enterprise applications. We introduce a conceptual framework for reproducible builds, we analyze a large dataset from Reproducible Central, and we develop a novel taxonomy of six root causes of unreproducibility. We study actionable mitigations: artifact and bytecode canonicalization using OSS-Rebuild and jNorm respectively. Finally, we present Chains-Rebuild, a tool that raises reproducibility success from 9.48% to 26.89% on 12,283 unreproducible artifacts. To sum up, our contributions are the first large-scale taxonomy of build unreproducibility causes in java, a publicly available dataset of unreproducible builds, and Chains-Rebuild, a canonicalization tool for mitigating unreproducible builds in java. Copyright © 2025, The Authors. All rights reserved.

关键词： java programming language

IFDS Taint Analysis with Access Paths

学校读者我要写书评

暂无评论

arXiv 2021年

作者： Allen, Nicholas Gauthier, François Jordan, Alexander Oracle Labs

Over the years, static taint analysis emerged as the analysis of choice to detect some of the most common web application vulnerabilities, such as SQL injection (SQLi) and cross-site scripting (XSS) [OWA]. Furthermore, from an implementation perspective, the IFDS dataow framework [RHS95] stood out as one of the most successful vehicles to implement static taint analysis for real-world java applications [TPF+09, TPC+13, ARF+14]. While existing approaches scale reasonably to medium-size applications (e.g. up to one hour analysis time for less than 100K lines of code), our experience suggests that no existing solution can scale to very large industrial code bases (e.g. more than 1M lines of code). In this paper, we present our novel IFDS-based solution to perform fast and precise static taint analysis of very large industrial java web applications. Similar to state-of-the-art approaches to taint analysis, our IFDS-based taint analysis uses access paths to abstract objects and_elds in a program. However, contrary to existing approaches, our analysis is demand-driven, which restricts the amount of code to be analyzed, and does not rely on a computationally expensive alias analysis, thereby signi_cantly improving scalability. Copyright © 2021, The Authors. All rights reserved.

关键词： java programming language

A Dataset of Software Bill of Materials for Evaluating SBOM Consumption Tools

学校读者我要写书评

暂无评论

arXiv 2025年

作者： Kishimoto, Rio Kanda, Tetsuya Manabe, Yuki Inoue, Katsuro Qiu, Shi Higo, Yoshiki The University of Osaka Japan Notre Dame Seishin University Japan The University of Fukuchiyama Japan Nanzan University Japan Toshiba Corporation Japan

A Software Bill of Materials (SBOM) is becoming an essential tool for effective software dependency management. An SBOM is a list of components used in software, including details such as component names, versions, and licenses. Using SBOMs, developers can quickly identify software components and assess whether their software depends on vulnerable libraries. Numerous tools support software dependency management through SBOMs, which can be broadly categorized into two types: tools that generate SBOMs and tools that utilize SBOMs. A substantial collection of accurate SBOMs is required to evaluate tools that utilize SBOMs. However, there is no publicly available dataset specifically designed for this purpose, and research on SBOM consumption tools remains limited. In this paper, we present a dataset of SBOMs to address this gap. The dataset we constructed comprises 46 SBOMs generated from real-world java projects, with plans to expand it to include a broader range of projects across various programming languages. Accurate and well-structured SBOMs enable researchers to evaluate the functionality of SBOM consumption tools and identify potential issues. We collected 3,271 java projects from GitHub and generated SBOMs for 798 of them using Maven with an open-source SBOM generation tool. These SBOMs were refined through both automatic and manual corrections to ensure accuracy, currently resulting in 46 SBOMs that comply with the SPDX Lite profile, which defines minimal requirements tailored to practical workflows in industries. This process also revealed issues with the SBOM generation tools themselves. The dataset is publicly available on Zenodo (DOI: 10.5281/zenodo.14233414). Copyright © 2025, The Authors. All rights reserved.

关键词： java programming language

The significance of user-defined identifiers in java source code authorship identification

学校读者我要写书评

暂无评论

arXiv 2021年

作者： Frantzeskou, Georgia MacDonell, Stephen G. Stamatatos, Efstathios Georgiou, Stelios Gritzalis, Stefanos Dept of Info. and Comm. Systems Engineering University of the Aegean Samos83200 Greece SERL School of Comp. and Math. Sciences Auckland University of Technology Private Bag 92006 Auckland1142 New Zealand Department of Statistics and Actuarial - Financial Mathematics University of the Aegean Samos83200 Greece

When writing source code, programmers have varying levels of freedom when it comes to the creation and use of identifiers. Do they habitually use the same identifiers, names that are different to those used by others? Is it then possible to tell who the author of a piece of code is by examining these identifiers? If so, can we use the presence or absence of identifiers to assist in correctly classifying programs to authors? Is it possible to hide the provenance of programs by identifier renaming? In this study, we assess the importance of three types of identifiers in source code author classification for two different java program data sets. We do this through a sequence of experiments in which we disguise one type of identifier at a time. These experiments are performed using as a tool the Source Code Author Profiles (SCAP) method. The results show that, although identifiers when examined as a whole do not seem to reflect program authorship for these data sets, when examined separately there is evidence that class names do signal the author of the program. In contrast, simple variables and method names used in java programs do not appear to reflect program authorship. On the contrary, our analysis suggests that such identifiers are so common as to mask authorship. We believe that these results have applicability in relation to the robustness of code plagiarism analysis and that the underlying methods could be valuable in cases of litigation arising from disputes over program authorship. Copyright © 2021, The Authors. All rights reserved.

关键词： java programming language

Megadiff: A dataset of 600k java source code changes categorized by diff size

学校读者我要写书评

暂无评论

arXiv 2021年

作者： Monperrus, Martin Martinez, Matias Ye, He Madeiral, Fernanda Durieux, Thomas Yu, Zhongxing

This paper presents Megadiff, a dataset of source code diffs. It focuses on java, with strict inclusion criteria based on commit message and diff size. Megadiff contains 663 029 java diffs that can be used for research on commit comprehension, fault localization, automated program repair, and machine learning on code changes. Copyright © 2021, The Authors. All rights reserved.

关键词： java programming language

A longitudinal analysis of bloated java dependencies

学校读者我要写书评

暂无评论

arXiv 2021年

作者： Soto-Valero, César Durieux, Thomas Baudry, Benoit KTH Royal Institute of Technology Sweden

We study the evolution and impact of bloated dependencies in a single software ecosystem: java/Maven. Bloated dependencies are third-party libraries that are packaged in the application binary but are not needed to run the application. We analyze the history of 435 java projects. This historical data includes 48,469 distinct dependencies, which we study across a total of 31,515 versions of Maven dependency trees. Bloated dependencies steadily increase over time, and 89.02% of the direct dependencies that are bloated remain bloated in all subsequent versions of the studied projects. This empirical evidence suggests that developers can safely remove a bloated dependency. We further report novel insights regarding the unnecessary maintenance efforts induced by bloat. We find that 22% of dependency updates performed by developers are made on bloated dependencies and that Dependabot suggests a similar ratio of updates on bloated dependencies. © 2021, CC BY.

关键词： java programming language

Replayable stack trace for investigating of exception occurrence processes of a java web application

学校读者我要写书评

暂无评论

Computer Software

Computer Software 2019年第1期36卷 101-118页

作者： Munakata, Satoshi Umekawa, Ryuichi Uehara, Tadahiro Dept. of Information Systems Technologies Laboratory Fu Jitsu Laboratories LTD Japan

When a runtime exception occurs during the operation or performance test of a java Web application, it can not be confirmed detailed behavior and values until the occurrence of an exception from the limited log, therefore it takes time to isolate the problem. With the Selective Capture/Replay method, it is possible to reproduce and investigate the behavior and values of the modules at an arbitrary point in time, based on the execution history collected from the previously selected modules. However, due to the large load of externally outputting all the inputs of the modules, it need to select a small number of modules to be reproduced before the application runs, therefore it is not suitable for investigating unexpected runtime exceptions. In this paper, we propose \Replayable Stack Trace" as a low load capture method of execution history which can reproduce and investigate behavior and values up to exception occurrence for more modules. In the proposed method, the recent execution result of partial codes in a selected module is stored in a memory during executing the module, and when an exception occures, a stack trace with the stored values is externally outputted as execution history. By reproducing and showing the recent execution results of all the codes in each module based on the execution history, it is possible to confirm detailed behavior and values up to the occurrence of exception straddling the call hierarchy. © 2019 Japan Society for Software Science and Technology. All rights reserved.

关键词： java programming language