检索结果-内蒙古大学图书馆

您好，读者！请登录

内蒙古大学图书馆

首页
概况
党建
资源
服务
科研支持
- 论文收录引用证明
- 科技查新
知识产权
档案馆
帮助

咨询与建议

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

您的常用邮箱：*

您的手机号码：*

问题描述：

当前已输入0个字，您还可以输入200个字

全部搜索
期刊论文
图书
学位论文
标准
纸本馆藏
外文资源发现
数据库导航
超星发现

高级检索

时间限定

出版年份：

文献类型

图书期刊文献学位论文多媒体

馆藏选择

电子馆藏纸本馆藏

核心期刊

全部期刊 SCI 收录期刊 SSCI 收录期刊 EI 收录期刊 CSCD 收录期刊 CSSCI 收录期刊

语言

中文英文

文献类型

期刊文献图书学位论文标准纸本馆藏

帮助

文字说明：

T=题名（书名、题名），A=作者（责任者），K=主题词，P=出版物名称，PU=出版社名称，O=机构（作者单位、学位授予单位、专利申请人），L=中图分类号，C=学科分类号，U=全部字段，Y=年（出版发行年、学位年度、标准发布年）

检索规则说明：

AND代表“并且”；OR代表“或者”；NOT代表“不包含”；(注意必须大写,运算符两边需空一格)

检索范例：

范例一：(K=图书馆学 OR K=情报学) AND A=范并思 AND Y=1982-2016
范例二：P=计算机应用与软件 AND (U=C++ OR U=Basic) NOT K=Visual AND Y=2011-2016

分类表

所选分类

>> <<

限定检索结果

文献类型

69 篇 会议
43 篇 期刊文献
2 篇 学位论文

馆藏范围

114 篇 电子文献
0 种 纸本馆藏

日期分布

学科分类号

106 篇 工学
- 75 篇 计算机科学与技术...
- 63 篇 软件工程
- 28 篇 电气工程
- 7 篇 信息与通信工程
- 7 篇 控制科学与工程
- 3 篇 电子科学与技术（可...
- 2 篇 机械工程
- 2 篇 仪器科学与技术
- 2 篇 材料科学与工程（可...
- 1 篇 网络空间安全
7 篇 管理学
- 5 篇 管理科学与工程(可...
- 2 篇 图书情报与档案管...
3 篇 理学
- 3 篇 数学

主题

114 篇 program dependen...
22 篇 program slicing
12 篇 dynamic slicing
11 篇 static slicing
9 篇 control flow gra...
6 篇 data dependence
6 篇 program slice
5 篇 program debuggin...
4 篇 refactoring
4 篇 control dependen...
4 篇 software mainten...
4 篇 system dependenc...
3 篇 concurrent progr...
3 篇 noninterference
3 篇 information flow...
3 篇 clone detection
3 篇 path condition
3 篇 abstract syntax ...
3 篇 software securit...
3 篇 dependence analy...

机构

6 篇 indian inst tech...
3 篇 rochester inst t...
2 篇 princeton univ p...
2 篇 univ tokushima g...
2 篇 univ tokushima d...
2 篇 univ karlsruhe t...
2 篇 fernuniversitat ...
2 篇 vrije univ bruss...
2 篇 institute of inf...
1 篇 univ sci & techn...
1 篇 university of sc...
1 篇 linköping univer...
1 篇 osaka univ grad ...
1 篇 amer univ beirut...
1 篇 univ wisconsin d...
1 篇 department of el...
1 篇 telecom paristec...
1 篇 near east univ a...
1 篇 univ sci & techn...
1 篇 zhejiang univ co...

作者

5 篇 mall r
5 篇 snelting gregor
4 篇 marin victor j.
4 篇 de roover coen
4 篇 rivero carlos r.
2 篇 inoue k
2 篇 ben brahim ghass...
2 篇 de koster joeri
2 篇 kurmangaleev sha...
2 篇 shimomura t
2 篇 zhioua zeineb
2 篇 avetisyan arutyu...
2 篇 hajj hazem
2 篇 krinke j
2 篇 chung is
2 篇 adaimy ralph
2 篇 de meuter wolfga...
2 篇 mund gb
2 篇 oh taewook
2 篇 zhang xj

语言

108 篇 英文
5 篇 其他
1 篇 中文

检索条件"主题词=Program Dependence Graph"

共 114 条记录，以下是71-80 订阅

全选清除本页清除全部题录导出标记到"检索档案"

详细简洁

排序：

Control and Data Flow in Security Smell Detection for Infrastructure as Code: Is It Worth the Effort? 20

Control and Data Flow in Security Smell Detection for Infras...

引用

IEEE/ACM 20th International Conference on Mining Software Repositories (MSR)

作者： Opdebeeck, Ruben Zerouali, Ahmed De Roover, Coen Vrije Univ Brussel Brussels Belgium

ISBN: (纸本)9798350311846

Infrastructure as Code is the practice of developing and maintaining computing infrastructure through executable source code. Unfortunately, IaC has also brought about new cyber attack vectors. Prior work has therefore proposed static analyses that detect security smells in Infrastructure as Code files. However, they have so far remained at a shallow level, disregarding the control and data flow of the scripts under analysis, and may lack awareness of specific syntactic constructs. These limitations inhibit the quality of their results. To address these limitations, in this paper, we present GASEL, a novel security smell detector for the Ansible IaC language. It uses graph queries on program dependence graphs to detect 7 security smells. Our evaluation on an oracle of 243 real-world security smells and comparison against two state-of-the-art security smell detectors shows that awareness of syntax, control flow, and data flow enables our approach to substantially improve both precision and recall. We further question whether the additional effort required to develop and run such an approach is justified in practice. To this end, we investigate the prevalence of indirection through control and data flow in security smells across more than 15 000 Ansible scripts. We find that over 55% of security smells contain data-flow indirection, and over 32% require a wholeproject analysis to detect. These findings motivate the need for deeper static analysis tools to detect security vulnerabilities in IaC.

关键词： Infrastructure as Code Ansible code smells security program dependence graph empirical study

来源：评论

学校读者我要写书评

暂无评论

Tracking Dependent Information Flows 3

Tracking Dependent Information Flows

引用

3rd International Conference on Information Systems Security and Privacy (ICISSP) / International Conference on Security and Cryptography (SECRYPT)

作者： Zhioua, Zeineb Roudier, Yves Ameur, Rabea Boulifa Kechiche, Takoua Short, Stuart EURECOM SAP Labs France Mougins France Univ Nice Sophia Antipolis CNRS I3S Biot France Telecom ParisTech Biot France SAP Labs France Mougins France

ISBN: (纸本)9789897582097

Ensuring the compliance of developed software with security requirements is a challenging task due to imprecision on the security guidelines definition, and to the lack of automatic and formal means to lead this verification. In this paper, we present our approach that aims at integrating the formal specification and verification of security guidelines in early stages of the development life cycle by combining the model checking together with information flow analysis. We formally specify security guidelines that involve dependent information flows as a basis to lead formal verification through model checking, and provide precise feedback to the developer.

关键词： Security Guidelines Formal Specification Model Checking Information Flow Analysis program dependence graph Labeled Transition System

来源：评论

学校读者我要写书评

暂无评论

Path-Sensitive Sparse Analysis without Path Conditions 2021

Path-Sensitive Sparse Analysis without Path Conditions

引用

42nd ACM SIGPLAN International Conference on programming Language Design and Implementation (PLDI)

作者： Shi, Qingkai Yao, Peisen Wu, Rongxin Zhang, Charles Hong Kong Univ Sci & Technol Hong Kong Peoples R China Xiamen Univ Xiamen Peoples R China

ISBN: (纸本)9781450383912

Sparse program analysis is fast as it propagates data flow facts via data dependence, skipping unnecessary control flows. However, when path-sensitively checking millions of lines of code, it is still prohibitively expensive because a huge number of path conditions have to be computed and solved via an SMT solver. This paper presents Fusion, a fused approach to inter-procedurally path-sensitive sparse analysis. In Fusion, the SMT solver does not work as a standalone tool on path conditions but directly on the program together with the sparse analysis. Such a fused design allows us to determine the path feasibility without explicitly computing path conditions, not only saving the cost of computing path conditions but also providing an opportunity to enhance the SMT solving algorithm. To the best of our knowledge, Fusion, for the first time, enables whole program bug detection on millions of lines of code in a common personal computer, with the precision of inter-procedural path-sensitivity. Compared to two state-of-the-art tools, Fusion is 10x faster but consumes only 10% of memory on average. Fusion has detected over a hundred bugs in mature open-source software, some of which have even been assigned CVE identifiers due to their security impact.

关键词： Sparse analysis path sensitivity program dependence graph SMT solving

来源：评论

学校读者我要写书评

暂无评论

RELIABILITY ANALYSIS OF TEST CASES FOR program SLICING 1

RELIABILITY ANALYSIS OF TEST CASES FOR PROGRAM SLICING

引用

1st International Conference on Innovation and Challenges in Cyber Security (ICICCS)

作者： Negi, Gaurav Elias, Eldo Kohli, Rashi Bibhu, Vimal Dr APJ AKTU CSE Dept Lucknow Uttar Pradesh India Amity Univ CSE Dept Greater Noida India

ISBN: (纸本)9781509020843

The concept used in the research paper includes program slicing which is referred as the process of computing the chosen set of instructions of the program, The slicing criterion refers to the slice that is likely to affect the values at some point while executing the program. The paper highlights the different test cases and comparative analysis of program slicing methods which corresponds to the applications which are usually utilized in software modification activities i.e. Debugging process, testing analysis and its phases, calculating complexity and program understanding etc. In the approach used in the paper the "slicing" method of the program focus on precise & definedsub-components of a program;which can further be used to produce the instructions needed for the program, relevant to an explicit method of computation. Applying slicing techniques to software's using slicing tools, we can determine which components can be facilitated and reused. The process of designing phase of and the reused patterns are likely to suggest improvement in the respective code.

关键词： Control flow graph Dynamic slicing program dependence graph program slicing Static slicing Test cases

来源：评论

学校读者我要写书评

暂无评论

Semi-Automatic Extraction and Exploitation of Hierarchical Pipeline Parallelism Using Profiling Information 10

Semi-Automatic Extraction and Exploitation of Hierarchical P...

引用

19th International Conference on Parallel Architectures and Compilation Techniques

作者： Tournavitis, Georgios Franke, Bjoern Univ Edinburgh Sch Informat Inst Comp Syst Architecture Edinburgh EH8 9YL Midlothian Scotland

ISBN: (纸本)9781450301787

In recent years multi-core computer systems have left the realm of high-performance computing and virtually all of today's desktop computers and embedded computing systems are equipped with several processing cores. Still, no single parallel programming model has found widespread support and parallel programming remains an art for the majority of application programmers. In addition, there exists a plethora of sequential legacy applications for which automatic parallelization is the only hope to benefit from the increased processing power of modern multi-core systems. In the past automatic parallelization largely focused on data parallelism. In this paper we present a novel approach to extracting and exploiting pipeline parallelism from sequential applications. We use profiling to overcome the limitations of static data and control flow analysis enabling more aggressive parallelization. Our approach is orthogonal to existing automatic parallelization approaches and additional data parallelism may be exploited in the individual pipeline stages. The key contribution of this paper is a whole-program representation that supports profiling, parallelism extraction and exploitation. We demonstrate how this enhances conventional pipeline parallelization by incorporating support for multi-level loops and pipeline stage replication in a uniform and automatic way. We have evaluated our methodology on a set of multimedia and stream processing benchmarks and demonstrate speedups of up to 4.7 on a eight-core Intel Xeon machine.

关键词： Parallelization Pipeline Parallelism Streaming Applications program dependence graph

来源：评论

学校读者我要写书评

暂无评论

Automatically identifying domain variables based on data dependence graph

Automatically identifying domain variables based on data dep...

引用

IEEE International Conference on Systems, Man and Cybernetics

作者： Wang, XY Sun, JL Yang, XH He, ZJ Maddineni, SR Zhejiang Univ Coll Comp Sci Hangzhou 310027 Peoples R China

ISBN: (纸本)0780385667

Experience in reengineering legacy sytem shows one shouldn't assume the availability of the system documents;even if they are available, the documents may be inconsistent with the code. The software code becomes more reliable source than any documentation to get business rules. So it is necessary to extract the business rules from source code. Domain variables can be mapped to important objects in the application domain. Identifying domain variables is a significant step in extracting the business rules from the source code. This paper proposes a solution to identify the domain variables automatically from the source code by applying Data dependence graph (DDG). The solution contains three steps: generating the DDG of legacy system;identifying pure domain varibles;identifying all domain variables which affect output domain variables;domain variables management. This solution been applied to a large complex financial legacy system which has proven to be successful.

关键词： business rules legacy system reverse engineering domain variable control flow graph program dependence graph data dependence graph

来源：评论

学校读者我要写书评

暂无评论

Scalable Framework for Accurate Binary Code Comparison

Scalable Framework for Accurate Binary Code Comparison

引用

2017 Ivannikov ISPRAS Open Conference (ISPRAS)

作者： Aslanyan, Hayk Avetisyan, Arutyun Arutunian, Mariam Keropyan, Grigor Kurmangaleev, Shamil Vardanyan, Vahagn ISPRAS Compiler Technol Dept Moscow Russia

ISBN: (纸本)9781538611326

Comparison of two binary files has many practical applications: the ability to detect programmatic changes between two versions, the ability to find old versions of statically linked libraries to prevent the use of well-known bugs, malware analysis, etc. In this article, a framework for comparison of binary files is presented. Framework uses IdaPro [1] disassembler and Binnavi [2] platform to recover structure of the target program and represent it as a call graph (CG). A program dependence graph (PDG) corresponds to each vertex of the CG. The proposed comparison algorithm consists of two main stages. At the first stage, several heuristics are applied to find the exact matches. Two functions are matched if at least one of the calculated heuristics is the same and unique in both binaries. At the second stage, backward and forward slicing is applied on matched vertices of CG to find further matches. According to empiric results heuristic method is effective and has high matching quality for unchanged or slightly modified functions. As a contradiction, to match heavily modified functions, binary code clone detection is used and it is based on finding maximum common subgraph for pair of PDGs. To achieve high performance on extensive binaries, the whole matching process is parallelized. The framework is tested on the number of real world libraries, such as python, openssh, openssl, libxml2, rsync, php, etc. Results show that in most cases more than 95% functions are truly matched. The tool is scalable due to parallelization of functions matching process and generation of PDGs and CGs.

关键词： Binary code comparison static analysis program dependence graph

来源：评论

学校读者我要写书评

暂无评论

A Framework for Secure Information Flow Analysis in Web Applications 29

A Framework for Secure Information Flow Analysis in Web Appl...

引用

IEEE 29th International Conference on Advanced Information Networking and Applications (IEEE AINA)

作者： Adaimy, Ralph El-Hajj, Wassim Ben Brahim, Ghassen Hajj, Hazem Safa, Haidar Amer Univ Beirut Comp Sci Beirut Lebanon Amer Univ Beirut Elect & Comp Eng Beirut Lebanon

ISBN: (纸本)9781479979042

Huge amounts of data and personal information are being sent to and retrieved from web applications on daily basis. Every application has its own confidentiality and integrity policies. Violating these policies can have broad negative impact on the involved company's financial status, while enforcing them is very hard even for the developers with good security background. In this paper, we propose a framework that enforces security-by-construction in web applications. Minimal developer effort is required, in a sense that the developer only needs to annotate database attributes by a security class. The web application code is then converted into an intermediary representation, called Extended program dependence graph (EPDG). Using the EPDG, the provided annotations are propagated to the application code and run against generic security enforcement rules that were carefully designed to detect insecure information flows as early as they occur. As a result, any violation in the data's confidentiality or integrity policies is reported. As a proof of concept, two PHP web applications, Hotel Reservation and Auction, were used for testing and validation. The proposed system was able to catch all the existing insecure information flows at their source. Moreover and to highlight the simplicity of the suggested approaches vs. existing approaches, two professional web developers assessed the annotation tasks needed in the presented case studies and provided a very positive feedback on the simplicity of the annotation task.

关键词： Web Applications Security Secure Information Flow program dependence graph Database Annotation

来源：评论

学校读者我要写书评

暂无评论

Distilling Useful Clones by Contextual Differencing

Distilling Useful Clones by Contextual Differencing

引用

20th Working Conference on Reverse Engineering

作者： Xing, Zhenchang Xue, Yinxing Jarzabek, Stan Nanyang Technol Univ Singapore 639798 Singapore Natl Univ Singapore Singapore Singapore

ISBN: (纸本)9781479929313

Clone detectors find similar code fragments and report large numbers of them for large systems. Textually similar clones may perform different computations, depending on the program context in which clones occur. Understanding these contextual differences is essential to distill useful clones for a specific maintenance task, such as refactoring. Manual analysis of contextual differences is time consuming and error-prone. To mitigate this problem, we present an automated approach to helping developers find and analyze contextual differences of clones. Our approach represents context of clones as program dependence graphs, and applies a graph differencing technique to identify required contextual differences of clones. We implemented a tool called CloneDifferentiator that identifies contextual differences of clones and allows developers to formulate queries to distill candidate clones that are useful for a given refactoring task. Two empirical studies show that CloneDifferentiator can reduce the efforts of post-detection analysis of clones for refactorings.

关键词： Clone analysis program dependence graph graph matching

来源：评论

学校读者我要写书评

暂无评论

CCSharp: An Efficient Three-phase Code Clone Detector Using Modified PDGs 24

CCSharp: An Efficient Three-phase Code Clone Detector Using ...

引用

24th Asia-Pacific Software Engineering Conference (APSEC)

作者： Wang, Min Wang, Pengcheng Xu, Yun Univ Sci & Technol China Sch Comp Sci Hefei 230027 Anhui Peoples R China Natl Univ Def Technol Lab High Performance Comp Anhui Prov Changsha 410073 Hunan Peoples R China Natl Univ Def Technol Collaborat Innovat Ctr High Performance Comp Changsha 410073 Hunan Peoples R China

ISBN: (纸本)9781538636817

Detecting code clones in software systems is becoming more and more important with the blossom of open source projects. In spite of numerous active researches, there is still a lack of detecting clones especially high-level clones efficiently and accurately. In this paper, we present CCSharp, a three-phase PDG-based clone detector which can detect much more clones besides high-level ones in software systems. To solve the problem of PDG-based tool's high time cost, we adopt two strategies to decrease the overall computing quantity of our tool: PDG's structure modification and characteristic vector filtering. In PDG's structure modification, we propose a novel technique to merge procedure invocation nodes which can make clone detection get rid of influence of procedure's parameters and disguise as well as downscale PDG's structure. We proceed clone detection on both real-world and artificial codebase by CCSharp along with other three state-of-the-art tools. Experiment results show that CCSharp has both high recall and precision, and can detect much more unique clones compared with the other three tools.

关键词： code clone detection program dependence graph PDG modification characteristic vector filtering

来源：评论

学校读者我要写书评

暂无评论

没有更多数据了...

全选清除本页清除全部题录导出标记到“检索档案”

共12页 << < 3 4 5 6 7 8 9 10 11 12 > >>

检索报告对象比较合并检索0

隐藏清空

合并搜索

回到顶部

执行限定条件

内容：

评分：

请选择保存的检索档案：

请选择收藏分类：

订阅名称：

通借通还

温馨提示：

图书名称：

借书校区：

取书校区：

手机号码：

邮箱地址：

一卡通帐号：

电话和邮箱必须正确填写，我们会与您联系确认。

联系人：

所在院系：

联系邮箱：

联系电话：

内蒙古自治区呼和浩特市赛罕区大学西街235号邮编: 010021

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：