检索结果-内蒙古大学图书馆

SCIENCE OF COMPUTER PROGRAMMING 2013年第3期78卷 327-342页

作者： Reynolds, Mark C. Boston Univ Dept Comp Sci Boston MA 02215 USA

The Java programming language has been widely described as secure by design. Nevertheless, a number of serious security vulnerabilities have been discovered in Java, particularly in the bytecode Verifier, a critical component used to verify class semantics before loading is complete. This paper describes a method for representing Java security constraints using the Alloy modeling language. It further describes a system for performing a security analysis on any block of Java bytecodes by converting these bytecodes into relation initializers in Alloy. Any counterexamples found by the Alloy analyzer correspond directly to potentially insecure code. Analysis of the approach is provided in the context of known security exploits, including type confusion attacks, invalid memory accesses and control flow misdirection. This type of analysis represents a significant departure from standard malware analysis methods based on signatures or anomaly detection. (c) 2011 Elsevier B.V. All rights reserved.

关键词： Java security jvm bytecode Alloy Lightweight modeling

来源：评论

学校读者我要写书评

暂无评论

Practical Program Repair via bytecode Mutation 2019

Practical Program Repair via Bytecode Mutation

引用

28th ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)

作者： Ghanbari, Ali Benton, Samuel Zhang, Lingming Univ Texas Dallas Richardson TX 75083 USA

ISBN: (纸本)9781450362245

Automated Program Repair (APR) is one of the most recent advances in automated debugging, and can directly fix buggy programs with minimal human intervention. Although various advanced APR techniques (including search-based or semantic-based ones) have been proposed, they mainly work at the source-code level and it is not clear how bytecode-level APR performs in practice. Also, empirical studies of the existing techniques on bugs beyond what has been reported in the original papers are rather limited. In this paper, we implement the first practical bytecode-level APR technique, PraPR, and present the first extensive study on fixing real-world bugs (e.g., Defects4J bugs) using jvm bytecode mutation. The experimental results show that surprisingly even PraPR with only the basic traditional mutators can produce genuine fixes for 17 bugs;with simple additional commonly used APR mutators, PraPR is able to produce genuine fixes for 43 bugs, significantly outperforming state-of-the-art APR, while being over 10X faster. Furthermore, we performed an extensive study of PraPR and other recent APR tools on a large number of additional real-world bugs, and demonstrated the overfitting problem of recent advanced APR tools for the first time. Lastly, PraPR has also successfully fixed bugs for other jvm languages (e.g., for the popular Kotlin language), indicating PraPR can greatly complement existing source-code-level APR.

关键词： Program repair Mutation testing Fault localization jvm bytecode

来源：评论

学校读者我要写书评

暂无评论

PraPR: Practical Program Repair via bytecode Mutation 34

PraPR: Practical Program Repair via Bytecode Mutation

引用

34th IEEE/ACM International Conference on Automated Software Engineering (ASE)

作者： Ghanbari, Ali Zhang, Lingming Univ Texas Dallas Richardson TX 75080 USA

ISBN: (纸本)9781728125084

Automated program repair (APR) is one of the recent advances in automated software engineering aiming for reducing the burden of debugging by suggesting high-quality patches that either directly fix the bugs, or help the programmers in the course of manual debugging. We believe scalability, applicability, and accurate patch validation are the main design objectives for a practical APR technique. In this paper, we present PraPR, our implementation of a practical APR technique that operates at the level of jvm bytecode. We discuss design decisions made in the development of PraPR, and argue that the technique is a viable baseline toward attaining aforementioned objectives. Our experimental results show that: (1) PraPR can fix more bugs than state-of-the-art APR techniques and can be over 10X faster, (2) state-of-the-art APR techniques suffer from dataset overfitting, while the simplistic template-based PraPR performs more consistently on different datasets, and (3) PraPR can fix bugs for other jvm languages, such as Kotlin. PraPR is publicly available at https://***/prapr/prapr.

关键词： Program Repair jvm bytecode Mutation Testing

来源：评论

学校读者我要写书评

暂无评论

Toward Practical Automatic Program Repair 34

Toward Practical Automatic Program Repair

引用

34th IEEE/ACM International Conference on Automated Software Engineering (ASE)

作者： Ghanbari, Ali Univ Texas Dallas Richardson TX 75080 USA

ISBN: (纸本)9781728125084

Automated program repair (APR) reduces the burden of debugging by directly suggesting likely fixes for the bugs. We believe scalability, applicability, and accurate patch validation are among the main challenges for building practical APR techniques that the researchers in this area are dealing with. In this paper, we describe the steps that we are taking toward addressing these challenges.

关键词： Program Repair jvm bytecode Mutation Testing

来源：评论

学校读者我要写书评

暂无评论

Modeling the Java bytecode Verifier

Modeling the Java Bytecode Verifier

引用

2nd International Conference on Abstract State Machines (ASM), Alloy, B and Z

作者： Reynolds, Mark C. Boston Univ Dept Comp Sci Boston MA 02215 USA

关键词： Java security jvm bytecode Alloy Lightweight modeling

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：