检索结果-内蒙古大学图书馆

Comprehensive Study on Machine Learning Techniques for Software Bug Prediction

INTERNATIONAL JOURNAL OF ADVANCED COMPUTER SCIENCE AND APPLICATIONS 2021年第8期12卷 726-735页

作者： Khleel, Nasraldeen Alnor Adam Nehez, Karoly Univ Miskolc Inst Informat Sci Dept Informat Engn H-3515 Miskolc Hungary

Software bugs are defects or faults in computer programs or systems that cause incorrect or unexpected operations. These negatively affect software quality, reliability, and maintenance cost;therefore many researchers have already built and developed several models for software bug prediction. Till now, a few works have been done which used machine learning techniques for software bug prediction. The aim of this paper is to present comprehensive study on machine learning techniques that were successfully used to predict software bug. Paper also presents a software bug prediction model based on supervised machine learning algorithms are Decision Tree (DT), Naive Bayes (NB), Random Forest (RF) and Logistic Regression (LR) on four datasets. We compared the results of our proposed models with those of the other studies. The results of this study demonstrated that our proposed models performed better than other models that used the same data sets. The evaluation process and the results of the study show that machine learning algorithms can be used effectively for prediction of bugs.

关键词： static code analysis software bug prediction software metrics machine learning techniques

来源：评论

学校读者我要写书评

暂无评论

Automatically Injecting Robustness Statements into Distributed Applications

引用

FUTURE INTERNET 2024年第11期16卷 416页

作者： Marletta, Daniele Midolo, Alessandro Tramontana, Emiliano Univ Catania Dipartimento Matemat & Informat I-95125 Catania Italy

When developing a distributed application, several issues need to be handled, and software components should include some mechanisms to make their execution resilient when network faults, delays, or tampering occur. For example, synchronous calls represent a too-tight connection between a client requesting a service and the service itself, whereby potential network delays or temporary server overloads would keep the client side hanging, exposing it to a domino effect. The proposed approach assists developers in dealing with such issues by providing an automatic tool that enhances a distributed application using simple blocking calls and makes it robust in the face of adverse events. The proposed devised solution consists in automatically identifying the parts of the application that connect to remote services using simple synchronous calls and substituting them with a generated customized snippet of code that handles potential network delays or faults. To accurately perform the proposed transformation, the devised tool finds application code statements that are data-dependent on the results of the original synchronous calls. Then, for the dependent statements, a solution involving guarding code, proper synchronization, and timeouts is injected. We experimented with the analysis and transformation of several applications and report a meaningful example, together with the analysis of the results achieved.

关键词： resilience refactoring static code analysis RMI network faults parallelism

来源：评论

学校读者我要写书评

暂无评论

A New Approach to Web Application Security: Utilizing GPT Language Models for Source code Inspection

引用

FUTURE INTERNET 2023年第10期15卷 326-326页

作者： Szabo, Zoltan Bilicki, Vilmos Univ Szeged Dept Software Engn Dugon Sq 13 H-6720 Szeged Hungary

Due to the proliferation of large language models (LLMs) and their widespread use in applications such as ChatGPT, there has been a significant increase in interest in AI over the past year. Multiple researchers have raised the question: how will AI be applied and in what areas? Programming, including the generation, interpretation, analysis, and documentation of static program code based on promptsis one of the most promising fields. With the GPT API, we have explored a new aspect of this: static analysis of the source code of front-end applications at the endpoints of the data path. Our focus was the detection of the CWE-653 vulnerability-inadequately isolated sensitive code segments that could lead to unauthorized access or data leakage. This type of vulnerability detection consists of the detection of code segments dealing with sensitive data and the categorization of the isolation and protection levels of those segments that were previously not feasible without human intervention. However, we believed that the interpretive capabilities of GPT models could be explored to create a set of prompts to detect these cases on a file-by-file basis for the applications under study, and the efficiency of the method could pave the way for additional analysis tasks that were previously unavailable for automation. In the introduction to our paper, we characterize in detail the problem space of vulnerability and weakness detection, the challenges of the domain, and the advances that have been achieved in similarly complex areas using GPT or other LLMs. Then, we present our methodology, which includes our classification of sensitive data and protection levels. This is followed by the process of preprocessing, analyzing, and evaluating static code. This was achieved through a series of GPT prompts containing parts of static source code, utilizing few-shot examples and chain-of-thought techniques that detected sensitive code segments and mapped the complex code base into managea

关键词： large language models GPT sensitive data vulnerability detection CWE-653 Angular static code analysis

来源：评论

学校读者我要写书评

暂无评论

Fix it, don't nix it [IT security]

引用

Engineering & Technology 2009年第18期4卷 58-59页

作者： Chris Tapp

The article discusses the security in C programming language. Critics claim that the decades-old C programming language is inherently insecure. The author disagrees. Programmers just have to use security tools to fix software *** in recent years has identified the root cause of many of the vulnerabilities typically found in C/C++ code. Coding standards such as the CERT C Secure Coding Standard help programmers avoid the associated pitfalls. However, without automated tools to check for non-compliance, it is, arguably, more or less impossible for a programmer to deliver fault-free code. Software analysis tools for static code analysis are available to enforce compliance with the guidelines recommended by these established coding standards. They can perform in-depth, systemwide analysis of the code, and can utilise formal methods to ensure that system security is not compromised. Software tools enforce compliance with the guidelines recommended by established coding standards.

关键词： C programming language High level languages security of data static code analysis Formal methods formal methods codes C/C++ code formal specification CERT C secure coding standard Data security software analysis tools system security C++ language

来源：评论

学校读者我要写书评

暂无评论

SDRM: simultaneous determination of regions and function-to-region mapping for scratchpad memories 08

引用

Proceedings of the 15th international conference on High performance computing

作者： Amit Pabalkar Aviral Shrivastava Arun Kannan Jongeun Lee Department of Computer Science and Engineering Arizona State University Tempe AZ

ISBN: (纸本)9783540898931

Many programmable embedded systems feature low power processorscoupled with fast compiler controlled on-chip scratchpad memories (SPMs) toreduce their energy consumption. SPMs are more efficient than caches in termsof energy consumption, performance, area and timing predictability. However,unlike caches SPMs need explicit management by software, the quality ofwhich can impact the performance of SPM based systems. In this paper, wepresent a fully-automated, dynamic code overlaying technique for SPMs basedon pure static analysis. static analysis is less restrictive than profiling and canbe easily extended to general compiler framework where the time consumingand expensive task of profiling may not be feasible. The SPM code mappingproblem is harder than bin packing problem, which is NP-complete. Therefore weformulate the SPMcode mapping as a binary integer linear programming problemand also propose a heuristic, determining simultaneously the region (bin) sizesas well as the function-to-region mapping. To the best of our knowledge, thisis the first heuristic which simultaneously solves the interdependent problemsof region size determination and the function-to-region mapping. We evaluateour approach for a set of MiBench applications on a horizontally split I-cache and SPM architecture (HSA). Compared to a cache-only architecture (COA),the HSA gives an average energy reduction of 35%, with minimal performancedegradation. For the HSA, we also compare the energy results from our proposedSDRM heuristic against a previous static analysis based mapping heuristic andobserve an average 27% energy reduction.

关键词： code overlay compilers scratchpad memory static code analysis

来源：评论

学校读者我要写书评

暂无评论

Roro8: A Fantasy Computer for Computer Architecture and Organization Education 2024

Roro8: A Fantasy Computer for Computer Architecture and Orga...

引用

Proceedings of the 55th ACM Technical Symposium on Computer Science Education V. 2

作者： Zeyad Ahmed Assiut University Asyut Egypt

ISBN: (纸本)9798400704246

In Learning computer architecture and low-level programming is a complex challenge for beginners. We introduce Roro8, an 8-bit fantasy computer system designed to simplify the learning process while closely mirroring real-world computer systems. Roro8 comprises an 8-bit microprocessor (RX8), memory-mapped I/O, external peripherals, and an external display (RD6448). This unique feature enables students to become familiar with datasheets of devices, a fundamental aspect of hardware *** core pedagogical goal is to have students implement an emulator, simulators, assemblers, and compilers, providing a hands-on learning experience. They can create games or see their own programs running on the display, making abstract concepts tangible and engaging. Our work addresses the challenge of teaching computer architecture by offering a novel solution. Unlike conventional system-on-chip designs, Roro8 simplifies the learning process while emphasizing practical engagement. This paper outlines the problem, reviews related work, introduces Roro8, and underscores the significance of our approach in enhancing computer science education.

关键词： algorithm visualization assessment educational applications static code analysis

来源：评论

学校读者我要写书评

暂无评论

Using Read-After-Read Dependencies to Control Task-Granularity 24

Using Read-After-Read Dependencies to Control Task-Granulari...

引用

Proceedings of the Platform for Advanced Scientific Computing Conference

作者： Andres Gartmann Mathias Müller mynatix ag Basel Switzerland meteoblue ag Basel Switzerland

ISBN: (纸本)9798400706394

In compiler theory, data analysis is used to exploit Instruction Level Parallelism (ILP). Three dependencies are used in modern compilers and hardware schemes efficiently and are fundamental to any code compilation. Read-after-read (RAR) has been left out, as it cannot cause a data hazard. This article introduces a novel method to use the additional dependence information contained in any code to enhance automatic parallelization. The method builds groups of arbitrary sequential instruction chains during static code analysis and introduces potential-transfers between these groups. This gives new opportunities when optimizing code to a parallel-processing hardware. The segmentation enables more information concerning the potential parallelization of the code and enhances optimization opportunities to be gained during static code analysis. The novel principle is introduced using a very simple example and then the segmentation is applied to task- and data-parallelism examples. The automatic parallelization to a multicore-platform is demonstrated using the new segmentation method. The ability to forecast the optimal distribution of the segments for a platform with two key parameters and resulting codes are compared to measured speedups.

关键词： static code analysis automatic code parallelization task-granularity hardware-near

来源：评论

学校读者我要写书评

暂无评论

CS-XML and model understanding 09

CS-XML and model understanding

引用

Proceedings of the 2009 Spring Simulation Multiconference

作者： Kara A. Olson C. Michael Overstreet E. Joseph Derrick Old Dominion University Norfolk VA Radford University Radford VA

The automated analysis of model specifications is an area that historically receives little attention in the simulation research community but which can offer significant benefits. A common objective in simulation is enhanced understanding of a system; model specification analysis can provide insights not otherwise available as well as time and cost savings in model development. The Condition Specification (CS) [1] is a model specification form that is amenable to such analysis; an XML-based representation of such is said to be in CS-XML. This paper discusses the motivations for CS-XML and presents some results from analysis efforts using codeSurfer [2], a software static analysis tool. CS-XML also provides an essential foundation for Web Services that support the analysis of discrete-event simulation models.

关键词： code analysis static code analysis model understanding web services

来源：评论

学校读者我要写书评

暂无评论

Atomic invariants verification and deadlock detection at compile-time

Atomic invariants verification and deadlock detection at com...

引用

IEEE International Conference on Intelligent Computer Communication and Processing

作者： Ionut Tamas Ioan Salomie Marcel Antal Computer Science Department Technical University of Cluj-Napoca Cluj-Napoca Romania

Modern systems must take full advantage of the underlying hardware paradigms in order to yield higher throughput and lower latency. A common way of maximizing the hardware usage in a system is by leveraging multithreaded techniques. These techniques however are very hard to reason by and can yield hard to detect bugs, such as deadlocks, livelocks or race conditions from unwanted interleavings of threads in the system's execution. Atomic locks are a standard mechanism to provide a safe way to alleviate such issues by specifying what regions of code need to be executed atomically such that regardless of the threads interleavings the shared memory remains in a consistent state and makes the code execution as a simple serial execution that easy to analyze and reason by, yielding increased programmer productivity and system efficiency. Our paper proposes a system that allows user to easily verify if a C# codebase has correctly implemented the way shared memory (field or properties) are modified and is able to detect race conditions or deadlocks for the specified shared memory. The main goal is to improve developer productivity and to improve the system codebase by specifying the atomicity constraints as unit or integration tests. We present the overall architecture of the system and how it detects the way certain atomic invariants are checked and deadlocks are identified, as well as the integration with an existing codebase. We also describe how the system proves correctness in checking these invariants. We have verified our system against multithreaded C# codebases and the system successfully checks the atomicity invariants and deadlock cases outputting the correct scenarios of how these can happen. We have also provided a way to decrease the risk of concurrency bugs regressions and improving the code quality, thus proving that our system achieves the proposed goals of providing a way for increased developer productivity, correct detection of deadlocks, atomic invariant

关键词： static code analysis SMT prover Concurrency Multithreading Deadlocks Atomic invariants code verification

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：