检索结果-内蒙古大学图书馆

A selection of distinguished papers from the 19th Working Conference on Reverse Engineering 2012

JOURNAL OF SOFTWARE-EVOLUTION AND PROCESS 2014年第11期26卷 929-930页

作者： Oliveto, Rocco Poshyvanyk, Denys Univ Molise Comp Sci & Sci Computat Lab Pesche Italy Coll William & Mary Dept Comp Sci Williamsburg VA 23185 USA

This special issue contains a selection of distinguished papers from the 19th Working Conference on Reverse Engineering, held in Kingston, Ontario, Canada on October 15th-18th, 2012. The papers address a variety of topics related to reverse engineering, namely the analysis of execution traces, development of fast and efficient forward static slicing techniques, and mining of software repositories aiming at deriving novel patterns related to reverse engineering activities, such as the migration in Java libraries and the analysis of effects of file editing patterns on source code quality. Copyright (c) 2014 John Wiley & Sons, Ltd.

关键词： reserve engineering software evolution execution traces source code analysis slicing mining software repository library migration software quality

来源：评论

学校读者我要写书评

暂无评论

Reverse Engineering PL/SQL Legacy code: An Experience Report 30

Reverse Engineering PL/SQL Legacy Code: An Experience Report

引用

30th IEEE International Conference on Software Maintenance and Evolution (ICSME)

作者： Habringer, Martin Moser, Michael Pichler, Josef Voestalpine Stahl GmbH A-4020 Linz Austria Software Competence Ctr Hagenberg GmbH Software Analyt & Evolut A-4232 Hagenberg Austria

ISBN: (纸本)9780769553030

The reengineering of legacy code is a tedious endeavor. Automatic transformation of legacy code from an old technology to a new one preserves potential problems in legacy code with respect to obsolete, changed, and new business cases. On the other hand, manual analysis of legacy code without assistance of original developers is time consuming and error-prone. For the purpose of reengineering PL/SQL legacy code in the steel making domain, we developed tool support for the reverse engineering of PL/SQL code into a more abstract and comprehensive representation. This representation then serves as input for stakeholders to manually analyze legacy code, to identify obsolete and missing business cases, and, finally, to support the re-implementation of a new system. In this paper we briefly introduce the tool and present results of reverse engineering PL/SQL legacy code in the steel making domain. We show how stakeholders are supported in analyzing legacy code by means of general-purpose analysis techniques combined with domain-specific representations and conclude with some of the lessons learned.

关键词： reverse engineering program comprehension source code analysis

来源：评论

学校读者我要写书评

暂无评论

Using Program Transformation, Annotation, and Reflection to Certify a Java Type Resolution Function

Using Program Transformation, Annotation, and Reflection to ...

引用

15th IEEE International Symposium on High-Assurance Systems Engineering (HASE)

作者： Winter, Victor L. Reinke, Carl Guerrero, Jonathan Univ Nebraska Dept Comp Sci Omaha NE 68182 USA

ISBN: (纸本)9781479934652

In Java, type resolution is a function that takes a reference to a type occurring in a given context as input, and returns the canonical form of that type. This information is fundamental to static analysis - a "must have" function underlying virtually all forms of semantic-based analysis. In the case of Java, this function is also complex and it is quite common to encounter tools where it is implemented incorrectly. This paper presents a novel approach for certifying the correctness of a given type resolution function with respect to an arbitrary Java source code base. The approach uses program transformation to instrument a subject code base in such a way that reflection can then be used to certify the correctness of the type resolution function against the function used by the Java compiler. In this form of certification, the type resolution function of the Java compiler serves as the test oracle.

关键词： source code analysis Java type resolution reflection annotation program transformation

来源：评论

学校读者我要写书评

暂无评论

Using codeBrowser to Seek Differences between Novice Programmers 14

Using CodeBrowser to Seek Differences between Novice Program...

引用

45th ACM SIGCSE Technical Symposium on Computer Science Education (SIGCSE)

作者： Heinonen, Kenny Hirvikoski, Kasper Luukkainen, Matti Vihavainen, Arto Univ Helsinki Dept Comp Sci POB 68 Gustaf Hallstromin Katu 2b FI-00014 Helsinki Finland

ISBN: (纸本)9781450326056

A large body of systems that gather data on students' programming process exists, and with the increase of massive open online courses in programming, the amount of gathered data is growing even at a higher rate. A common issue for data analysis is the lack of common tools for visualizing source code snapshots. We have created a browser-side snapshot analysis tool called codeBrowser that provides a clean REST API that anyone can integrate their snapshot data into. In this article, we describe codeBrowser and as an example, discuss how it has been used to seek differences between novice programmers that have passed (n=10) or failed (n=10) an introductory programming course.

关键词： programming education snapshot analysis source code analysis snapshots visualization

来源：评论

学校读者我要写书评

暂无评论

Automatic Detection and Correction of Web Application Vulnerabilities using Data Mining to Predict False Positives 14

Automatic Detection and Correction of Web Application Vulner...

引用

23rd International Conference on World Wide Web (WWW)

作者： Medeiros, Iberia Neves, Nuno F. Correia, Miguel Univ Lisbon Fac Sci LaSIGE Lisbon Portugal Univ Lisbon Inst Super Tecn INESC ID Lisbon Portugal

ISBN: (纸本)9781450327442

Web application security is an important problem in today's internet. A major cause of this status is that many programmers do not have adequate knowledge about secure coding, so they leave applications with vulnerabilities. An approach to solve this problem is to use source code static analysis to find these bugs, but these tools are known to report many false positives that make hard the task of correcting the application. This paper explores the use of a hybrid of methods to detect vulnerabilities with less false positives. After an initial step that uses taint analysis to flag candidate vulnerabilities, our approach uses data mining to predict the existence of false positives. This approach reaches a trade-off between two apparently opposite approaches: humans coding the knowledge about vulnerabilities (for taint analysis) versus automatically obtaining that knowledge (with machine learning, for data mining). Given this more precise form of detection, we do automatic code correction by inserting fixes in the source code. The approach was implemented in the WAP tool (1) and an experimental evaluation was performed with a large set of open source PHP applications.

关键词： Web applications security input validation vulnerabilities false positives source code analysis automatic protection software security data mining

来源：评论

学校读者我要写书评

暂无评论

Toward Extended Change Types for Analyzing Software Faults 14

Toward Extended Change Types for Analyzing Software Faults

引用

14th Annual International Conference on Quality Software (QSIC)

作者： Kidwell, Billy Hayes, Jane Huffman Nikora, Allen P. Univ Kentucky Dept Comp Sci Lexington KY 40506 USA CALTECH Jet Prop Lab Pasadena CA USA

ISBN: (纸本)9781479971978

This research extends an existing source code change taxonomy that was designed to analyze change coupling. The extension expands change types related to statements in order to achieve more granular data about the type of statement that is changed. The extended taxonomy is evaluated to determine if it can be applied to software fault analysis. We found that the extended change types occur consistently and with high frequency in fault fixes for Eclipse 2.0 and 3.0. Faults were then clustered according to the source code changes and analyzed. We found that the types and sizes of clusters are highly correlated, indicating some consistency in the patterns of the fault fixes. Finally, we performed an initial investigation to determine whether faults in the same cluster have similar characteristics. Our results indicate that many of the change types can be used to characterize the type of fault that has been fixed. However, some of the change types obfuscate the true nature of the fix. Ideas for improving the taxonomy based on these findings are provided.

关键词： Fault classification change taxonomy clustering source code analysis

来源：评论

学校读者我要写书评

暂无评论

An Automated Architectural Evaluation Approach Based on Metadata and code analysis 15

An Automated Architectural Evaluation Approach Based on Meta...

引用

15th International Conference on Enterprise Information Systems (ICEIS)

作者： Pinto, Felipe Kulesza, Uira Guerra, Eduardo Fed Univ Rio Grande Norte UFRN Natal RN Brazil Fed Inst Educ Sci & Technol Rio Grande Norte IFRN Natal RN Brazil Natl Inst Space Res INPE Sao Jose Dos Campos Brazil

ISBN: (纸本)9783319094922;9783319094915

Traditional methods of scenario-based software architecture evaluation rely on manual review and advanced skills from architects and developers. They are used when the system architecture has been specified, but before its implementation has begun. When the system implementation evolves, code analysis can enable the automation of this process and the reuse of architectural information. We propose an approach that introduces metadata about use case scenarios and quality attributes in the source code of the system in order to support automated architectural evaluation through of static and dynamic code analysis and produce reports about scenarios, quality attributes, code assets, and potential tradeoff points among quality attributes. Our work also describes the implementation of a code analysis tool that provides support to the approach. In addition, the paper also presents the preliminary results of its application for the architectural analysis of an enterprise web system and an e-commerce web system.

关键词： Architectural evaluation source code analysis

来源：评论

学校读者我要写书评

暂无评论

Detecting Anomalous Energy Consumption in Android Applications

引用

18th Brazilian Symposium on Programming Languages (SBLP)

作者： Couto, Marco Carcao, Tiago Cunha, Jacome Fernandes, Joao Paulo Saraiva, Joao Univ Minho INESC TEC HASLab P-4719 Braga Portugal

ISBN: (纸本)9783319118635;9783319118628

The use of powerful mobile devices, like smartphones, tablets and laptops, is changing the way programmers develop software. While in the past the primary goal to optimize software was the run time optimization, nowadays there is a growing awareness of the need to reduce energy consumption. This paper presents a technique and a tool to detect anomalous energy consumption in Android applications, and to relate it directly with the source code of the application. We propose a dynamically calibrated model for energy consumption for the Android ecosystem that supports different devices. The model is used as an API to monitor the application execution: first, we instrument the application source code so that we can relate energy consumption to the application source code;second, we use a statistical approach, based on fault-localization techniques, to localize abnormal energy consumption in the source code.

关键词： Green Computing Energy-aware Software source code analysis

来源：评论

学校读者我要写书评

暂无评论

Towards Tool Support for Analyzing Legacy Systems in Technical Domains

Towards Tool Support for Analyzing Legacy Systems in Technic...

引用

Software Evolution Week / IEEE Conference on Software Maintenance, Reengineering, and Reverse Engineering (CSMR-WCRE)

作者： Klammer, Claus Pichler, Josef Software Competence Ctr Hagenberg GmbH Software Analyt & Evolut A-4232 Hagenberg Austria

ISBN: (纸本)9781479937523

Software in technical domains contains extensive and complex computations in a highly-optimized and unstructured way. Such software systems developed and maintained over years are prone to become legacy code based on old technology and without accurate documentation. We have conducted several industrial projects to reengineer and redocument legacy systems in electrical engineering and steel making domains by means of self-provided techniques and tools. Based on this experience, we derived requirements for a toolkit to analyze legacy code in technical domains and developed a corresponding toolkit including feature location and static analysis on a multi-language level. We have applied our approach and toolkit for software systems implemented in the C++, Fortran, and PL/SQL programming languages and illustrate main benefits of our approach from these experiences.

关键词： Software analytics legacy code reverse engineering source code analysis feature location program comprehension

来源：评论

学校读者我要写书评

暂无评论

A source code Change Impact analysis Algorithm for Iterative Software Development

引用

INTERNATIONAL JOURNAL OF DECISION SUPPORT SYSTEM TECHNOLOGY 2012年第4期4卷 60-75页

作者： Wilkerson, Jerod W. Sam & Irene Black Sch Business Dept Informat Syst Erie PA 16563 USA

CHA-AS is a source code change impact analysis algorithm for Java programs. CHA-AS differs from other algorithms in that it does not require the program versions it compares to be whole programs with a well-defined program entry point. The need for such an algorithm is evident in iterative software development projects and projects involving the development of code libraries and frameworks-all of which may not have a well-defined program entry point at the time when change impact analysis needs to be performed. The CHA-AS algorithm supports the development of Decision Support Systems for software development managers and programmers working on iterative software development projects, or projects to develop source code libraries and frameworks. This paper describes the CHA-AS algorithm and demonstrates it to be efficient and effective in calculating source code change impact.

关键词： Algorithm Change Impact analysis Change Impact analysis Algorithm Iterative Software Development source code analysis Static analysis

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：