检索结果-内蒙古大学图书馆

Back to the source [Feature: source code analysis]

Information Professional 2005年第4期2卷 38-42页

作者： Andy Gothard

The case for a less buggy development process is compelling. Organisations are looking to modeling languages such as the Unified Modeling Language (UML) to try to guarantee that requirements are written correctly and unambiguously. The concept leads towards a model-based design concept, and increasing opportunities to use automatic code generation techniques, which in general produce more 'compliant' code. Automated source code analysis tools can track down code problems but do they cause too much trouble by pointing at statements.

关键词： Diagnostic, testing, debugging and evaluating systems automatic code generation automatic programming modeling languages program compilers Software engineering techniques program testing source code analysis program debugging software quality model-based design formal specification Compilers, interpreters and other processors formal verification Formal methods

来源：评论

学校读者我要写书评

暂无评论

PROTECTION AGAINST TROJAN HORSES BY source code analysis

引用

ELECTRONICS AND COMMUNICATIONS IN JAPAN PART III-FUNDAMENTAL ELECTRONIC SCIENCE 1994年第1期77卷 11-19页

作者： SAITO, T AIDA, H KAWAGUCHI, Y Faculty of Engineering The University of Tokyo Tokyo Japan 113 Presently with NTT.

The technology of security in computer networks has far-reaching implications. In this paper, assuming a UNIX network system, which is the most Popular currently, we enumerate the threats against security and classify the problems. Among the problems so defined, we consider particularly the Trojan horse problem, which is important when a program is received from the outside;and we propose a method of protection against Trojan horses. Zn the proposed protection method, objects which have been modified by the source program are extracted and are compared with a previously prepared list (the condition list) of objects which should not have been modified. In this method, verification of the security of the program needs to be done only at the time of its installation, so there is no loss in efficiency of performance at run time. Also, we can prevent security violations which cannot be regulated by controlling access and flow. In the proposed method, the major problem is determining the extent to which altered objects can be detected. In this regard, we perform some experiments on the free software X11R4 and TeX. Finally, based on the results of the experiments, we evaluate the proposed protection method on the security of programs imported from the outside.

关键词： NETWORK SECURITY TROJAN HORSE PROGRAMS source code analysis

来源：评论

学校读者我要写书评

暂无评论

Getting Started with source code analysis for Programming Education Research 2022

Getting Started with Source Code Analysis for Programming Ed...

引用

Proceedings of the 53rd ACM Technical Symposium on Computer Science Education V. 2

作者： Neil C. C. Brown Michael Kölling Charalampos Kyfonidis Pierre Weill-Tessier King's College London London United Kingdom

ISBN: (纸本)9781450390712

Interesting ideas for computing education research often involve analysis of source code written by beginners. The process is often difficult to carry out: data must be collected from learners and then the code must be analysed. This can be daunting and time-intensive. In this workshop we will show how to get started with syntactic source analysis using a pre-provided data set and an easier analysis technique. The dataset is Blackbox Mini; the Blackbox project has been collecting data from Java novices for the last eight years and a subset of the data, named Blackbox Mini, has been extracted into a SrcML data format. SrcML is an XML-based format for storing program code so that the syntax tree can be navigated using existing powerful XML libraries. This makes source code analysis easier and more accessible to a wider audience. Attendees at the workshop will learn how to use SrcML to work with the Blackbox Mini data set, including basic statistics gathering, and basic syntactic source code analysis. As a result, attendees will be able to design and execute their own source-based research studies. Attendees should bring their own device with an SSH client installed.

关键词： blackbox mini source code analysis srcml blackbox

来源：评论

学校读者我要写书评

暂无评论

A source code Quality analysis Approach 10

A Source Code Quality Analysis Approach

引用

10th International Conference on Software, Knowledge, Information Management and Applications (SKIMA)

作者： Iqbal, Tahira Iqbal, Moniba Asad, Muhammad Khan, Aihab Iqra Univ Dept Comp & Technol Islamabad Pakistan Natl Univ Sci & Technol CS Dept Mil Coll Signals Islamabad Pakistan

ISBN: (纸本)9781509032983

A huge amount of source code is written everyday for different languages and various platforms. It is necessary that the code written is efficient and optimized in terms of various parameters including hardware utilization, maintainability, testability, reusability, portability, understandability and simplicity etc. This paper proposes a weight based approach for measuring quality of a source code by using different attributes. Different parameters from source code are considered within each attribute. At the end, experimentation is performed and source code quality is being determined for six different C++ programs.

关键词： source code analysis quality source coding source code testing analyzing source code

来源：评论

学校读者我要写书评

暂无评论

A source code Change Impact analysis Algorithm for Iterative Software Development

引用

INTERNATIONAL JOURNAL OF DECISION SUPPORT SYSTEM TECHNOLOGY 2012年第4期4卷 60-75页

作者： Wilkerson, Jerod W. Sam & Irene Black Sch Business Dept Informat Syst Erie PA 16563 USA

CHA-AS is a source code change impact analysis algorithm for Java programs. CHA-AS differs from other algorithms in that it does not require the program versions it compares to be whole programs with a well-defined program entry point. The need for such an algorithm is evident in iterative software development projects and projects involving the development of code libraries and frameworks-all of which may not have a well-defined program entry point at the time when change impact analysis needs to be performed. The CHA-AS algorithm supports the development of Decision Support Systems for software development managers and programmers working on iterative software development projects, or projects to develop source code libraries and frameworks. This paper describes the CHA-AS algorithm and demonstrates it to be efficient and effective in calculating source code change impact.

关键词： Algorithm Change Impact analysis Change Impact analysis Algorithm Iterative Software Development source code analysis Static analysis

来源：评论

学校读者我要写书评

暂无评论

Enhancing HPC System Log analysis by Identifying Message Origin in source code 29

Enhancing HPC System Log Analysis by Identifying Message Ori...

引用

29th IEEE International Symposium on Software Reliability Engineering (ISSRE)

作者： Hickman, Megan Fulp, Dakota Baseman, Elisabeth Blanchard, Sean Greenberg, Hugh Jones, William DeBardeleben, Nathan Los Alamos Natl Lab Ultrascale Syst Res Ctr High Performance Comp Los Alamos NM 87545 USA Coastal Carolina Univ Dept Comp Sci Conway SC 29528 USA

ISBN: (纸本)9781538694435

Supercomputers, high performance computers, and clusters are composed of very large numbers of independent operating systems that are generating their own system logs. Messages are generated locally on each host and usually are transferred to a central logging infrastructure which keeps a master record of the system as a whole. At Los Alamos National Laboratory (LANL) a collection of open source cloud tools are used which log over a hundred million system log messages per day from over a dozen such systems. Understanding what source code created those messages can be extremely useful to system administrators when they are troubleshooting these complex systems as it can give insight into a subsystem (disk, network, etc.) or even line numbers of source code. Oftentimes, debugging supercomputers is done in environments where open access cannot be provided to all individuals due to security concerns. As such, providing a means for conveying information between system log messages and source code lines allows for communication between system administrators and source developers or supercomputer vendors. In this work, we demonstrate a prototype tool which aims to provide such an expert system. We leverage capabilities from ElasticSearch, one of the open source cloud tools deployed at LANL, and with our own metrics develop a means for correctly matching source code lines as well as files with high confidence. We discuss confidence metrics and show that in our experiments 92% of syslog lines were correctly matched. For any future samples, we predict with 95% confidence that the correct file will be detected between 88.2% and 95.8% of the time. Finally, we discuss enhancements that are underway to improve the tool and study it on a larger dataset.

关键词： system logs source code analysis ElasticSearch Logan expert system

来源：评论

学校读者我要写书评

暂无评论

Multilanguage Detection of Design Pattern Instances

引用

JOURNAL OF SOFTWARE-EVOLUTION AND PROCESS 2025年第2期37卷

作者： Andrade, Hugo Bispo, Joao Correia, Filipe F. Univ Porto Fac Engn Porto Portugal INESC TEC Porto Portugal

code comprehension is often supported by source code analysis tools that provide more abstract views over software systems, such as those detecting design patterns. These tools encompass analysis of source code and ensuing extraction of relevant information. However, the analysis of the source code is often specific to the target programming language. We propose DP-LARA, a multilanguage pattern detection tool that uses the multilanguage capability of the LARA framework to support finding pattern instances in a code base. LARA provides a virtual AST, which is common to multiple OOP programming languages, and DP-LARA then performs code analysis of detecting pattern instances on this abstract representation. We evaluate the detection performance and consistency of DP-LARA with a few software projects. Results show that a multilanguage approach does not compromise detection performance, and DP-LARA is consistent across the languages we tested it for (i.e., Java and C/C++). Moreover, by providing a virtual AST as the abstract representation, we believe to have decreased the effort of extending the tool to new programming languages and maintaining existing ones.

关键词： design pattern detection multilanguage source code analysis

来源：评论

学校读者我要写书评

暂无评论

Boosting source code learning with text-oriented data augmentation: an empirical study

引用

EMPIRICAL SOFTWARE ENGINEERING 2025年第3期30卷 1-65页

作者： Dong, Zeming Hu, Qiang Guo, Yuejun Zhang, Zhenya Cordy, Maxime Papadakis, Mike Le Traon, Yves Zhao, Jianjun Univ Luxembourg Esch Sur Alzette Luxembourg Tianjin Univ Tianjin Peoples R China Luxembourg Inst Sci & Technol Esch Sur Alzette Luxembourg Kyushu Univ Fukuoka Japan

Recent studies have demonstrated remarkable advancements in source code learning, which applies deep neural networks (DNNs) to tackle various software engineering tasks. Similar to other DNN-based domains, source code learning also requires massive high-quality training data to achieve the success of these applications. Data augmentation, a technique used to produce additional training data, is widely adopted in other domains (e.g. computer vision). However, the existing practice of data augmentation in source code learning is limited to simple syntax-preserved methods, such as code refactoring. In this paper, considering that source code can also be represented as text data, we take an early step to investigate the effectiveness of data augmentation methods originally designed for natural language texts in the context of source code learning. To this end, we focus on code classification tasks and conduct a comprehensive empirical study across four critical code problems and four DNN architectures to assess the effectiveness of 25 data augmentation methods. Our results reveal specific data augmentation methods that yield more accurate and robust models for source code learning. Additionally, we discover that the data augmentation methods remain beneficial even when they slightly break source code syntax.

关键词： source code analysis Data augmentation Program transformation

来源：评论

学校读者我要写书评

暂无评论

The Software Bill of Materials

引用

COMPUTER 2025年第4期58卷 115-120页

作者： Riehle, Dirk Friedrich Alexander Univ Erlangen Nurnberg Open Source Software D-91058 Erlangen Germany

Cybersecurity threats and software supply chain attacks are at an all-time high. Customers and agencies keep tightening the requirements for their software. An important recent development is the practical use of soft... 详细信息

关键词： Bill Of Materials Open source Open source Software Supply Chain source code European Union Software Components Copy And Paste List Of Components code Snippets Dependency Graph Non Functional Requirements Large Customers Hierarchical Structure Use Of Information Unique Identifier Basic Requirements Types Of Components Copyright Holder source code analysis Package Manager Legal Information Legal Separation Binary Files Erroneous Data

来源：评论

学校读者我要写书评

暂无评论

Question-Answer Methodology for Vulnerable source code Review via Prototype-Based Model-Agnostic Meta-Learning

引用

FUTURE INTERNET 2025年第1期17卷 33-33页

作者： Corona-Fraga, Pablo Hernandez-Suarez, Aldo Sanchez-Perez, Gabriel Toscano-Medina, Linda Karina Perez-Meana, Hector Portillo-Portillo, Jose Olivares-Mercado, Jesus Villalba, Luis Javier Garcia Ctr Invest Innovac Tecnol Informac & Comunicac Ave San Fernando 37 Mexico City 14050 Mexico Inst Politecn Nacl ESIME Culhuacan Mexico City 04440 Mexico Univ Complutense Madrid UCM Fac Comp Sci & Engn Dept Software Engn & Artificial Intelligence DISIA Off 431Grp Anal Secur & Syst GASS Calle Prof Jose Garcia Santesmases 9Ciudad Univ Madrid 28040 Spain

In cybersecurity, identifying and addressing vulnerabilities in source code is essential for maintaining secure IT environments. Traditional static and dynamic analysis techniques, although widely used, often exhibit high false-positive rates, elevated costs, and limited interpretability. Machine Learning (ML)-based approaches aim to overcome these limitations but encounter challenges related to scalability and adaptability due to their reliance on large labeled datasets and their limited alignment with the requirements of secure development teams. These factors hinder their ability to adapt to rapidly evolving software environments. This study proposes an approach that integrates Prototype-Based Model-Agnostic Meta-Learning(Proto-MAML) with a Question-Answer (QA) framework that leverages the Bidirectional Encoder Representations from Transformers (BERT) model. By employing Few-Shot Learning (FSL), Proto-MAML identifies and mitigates vulnerabilities with minimal data requirements, aligning with the principles of the Secure Development Lifecycle (SDLC) and Development, Security, and Operations (DevSecOps). The QA framework allows developers to query vulnerabilities and receive precise, actionable insights, enhancing its applicability in dynamic environments that require frequent updates and real-time analysis. The model outputs are interpretable, promoting greater transparency in code review processes and enabling efficient resolution of emerging vulnerabilities. Proto-MAML demonstrates strong performance across multiple programming languages, achieving an average precision of 98.49%, recall of 98.54%, F1-score of 98.78%, and exact match rate of 98.78% in PHP, Java, C, and C++.

关键词： question-answer methodology vulnerable source code review prototype-based learning model-agnostic meta-learning Proto-MAML code vulnerability detection software security few-shot learning source code analysis meta-learning techniques automated code review cybersecurity knowledge transfer code reconstruction

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：