检索结果-内蒙古大学图书馆

Finding parallel patterns through static analysis in C plus plus applications

INTERNATIONAL JOURNAL OF HIGH PERFORMANCE COMPUTING APPLICATIONS 2018年第6期32卷 779-788页

作者： del Rio Astorga, David Dolz, Manuel F. Miguel Sanchez, Luis Daniel Garcia, J. Danelutto, Marco Torquati, Massimo Univ Carlos III Madrid Dept Comp Sci Leganes 28911 Spain Univ Pisa Dept Comp Sci Pisa Italy

Since the 'free lunch' of processor performance is over, parallelism has become the new trend in hardware and architecture design. However, parallel resources deployed in data centers are underused in many cases, given that sequential programming is still deeply rooted in current software development. To address this problem, new methodologies and techniques for parallel programming have been progressively developed. For instance, parallel frameworks, offering programming patterns, allow expressing concurrency in applications to better exploit parallel hardware. Nevertheless, a large portion of production software, from a broad range of scientific and industrial areas, is still developed sequentially. Considering that these software modules contain thousands, or even millions, of lines of code, an extremely large amount of effort is needed to identify parallel regions. To pave the way in this area, this paper presents Parallel Pattern Analyzer Tool, a software component that aids the discovery and annotation of parallel patterns in source codes. This tool simplifies the transformation of sequential source code to parallel. Specifically, we provide support for identifying Map, Farm, and Pipeline parallel patterns and evaluate the quality of the detection for a set of different C++ applications.

关键词： Parallel patterns C++11 attributes source code analysis tools

来源：评论

学校读者我要写书评

暂无评论

Compiler hacking for source code analysis

引用

SOFTWARE QUALITY JOURNAL 2004年第4期12卷 383-406页

作者： Antoniol, G Di Penta, M Masone, G Villano, U Univ Sannio Res Ctr Software Technol Dept Engn I-82100 Benevento Italy Telsey Telecommun SpA I-82100 Benevento Italy

Many activities related to software quality assessment and improvement, such as empirical model construction, data flow analysis, testing or reengineering, rely on static source code analysis as the first and fundamental step for gathering the necessary input information. In the past, two different strategies have been adopted to develop tool suites. There are tools encompassing or implementing the source parse step, where the parser is internal to the toolkit, and is developed and maintained with it. A different approach builds tools on the top of external already-available components such as compilers that output the program abstract syntax tree, or that make it available via an API. This paper discusses techniques, issues and challenges linked to compiler patching or wrapping for analysis purposes. In particular, different approaches for accessing the compiler parsing information are compared, and the techniques used to decouple the parsing front end from the analysis modules are discussed. Moreover, the paper presents an approach and a tool, XOgastan, developed exploiting the gcc/g++ ability to save a representation of the intermediate abstract syntax tree. XOgastan translates the gcc/g++ dumped abstract syntax tree format into a Graph eXchange Language representation, which makes it possible to take advantage of currently available XML tools for any subsequent analysis step. The tool is illustrated and its design discussed, showing its architecture and the main implementation choices made.

关键词： source code analysis tools gcc XML GXL

来源：评论

学校读者我要写书评

暂无评论

Evaluation of Static Web Vulnerability analysis tools 5

Evaluation of Static Web Vulnerability Analysis Tools

引用

5th IEEE International Conference on Parallel, Distributed and Grid Computing (PDGC)

作者： Tyagi, Shobha Kumar, Krishan Manav Rachna Int Inst Researcher & Studies Dept Comp Sci & Technol Faridabad India

ISBN: (纸本)9781728106465

In the recent years many web applications of different kinds has grown significanity all over the world. Unfortunately on the other hand, there is an increase in the number of attacks on these applications. Hence, security against web application vulnerabilities become necessary. However, checking all web vulnerabilities manually is tedious and needs much effort and skills. So the use of web application vulnerability scanners becomes necessary. Many static and dynamic, open source and commercial vulnerability analysis tools are available. In this paper, we evaluate two open source, static web application vulnerability analyses tools, OWASP WAP and RIPS using the deliberately vulnerable web application. These are Damn Vulnerable Web Application (DVWA) and A Buggy Web Application (bWAPP). OWASP WAP and RIPS tools are selected as they are open source static tools WAP is recommended by OWASP and RIPS provide commercial versions as well. We used deliberately vulnerable web applications so that the vulnerabilities detected could be easily analyzed whether they are true positive or false positive. We found that OWASP WAP give better results over RIPS in our experimental scenario.

关键词： Web Application Vulnerability Static Application Security Testing source code analysis tools

来源：评论

学校读者我要写书评

暂无评论

Compiler hacking for source code analysis

Compiler hacking for source code analysis

引用

3rd IEEE International Workshop on source code analysis and Manipulation

作者： Antoniol, G Di Penta, M Masone, G Villano, U Univ Sannio Res Ctr Software Technol Dept Engn I-82100 Benevento Italy Telsey Telecommun SpA I-82100 Benevento Italy

关键词： source code analysis tools gcc XML GXL

来源：评论

学校读者我要写书评

暂无评论

XOgastan: XML-oriented gcc AST analysis and transformations 3

XOgastan: XML-oriented gcc AST analysis and transformations

引用

3rd IEEE International Workshop on source code analysis and Manipulation

作者： Antoniol, G Di Penta, M Masone, G Villano, U Univ Sannio Dept Engn RCOST I-82100 Benevento Italy

ISBN: (纸本)0769520057

Software maintenance, program analysis and transformation tools almost always rely on static source code analysis as the first and fundamental step to gather information. In the past, two different strategies have been adopted to develop tool suites. There are tools encompassing or implementing the source parse step, where the parser is internal to the toolkit, developed and maintained with it. A different approach builds tools on the top of external, already available, components such as compilers that output the abstract syntax tree, or make it available via an API. This paper presents an approach and a tool, XOgastan, developed exploiting the gcc/g++ ability to save a representation of the intermediate abstract syntax tree into a file. XOgastan translates the gcc/g++ format into a Graph eXchange Language representation, thus taking advantage of the high number of currently available XML tools for the subsequent analysis phases. Here the tool is illustrated and its design is discussed, showing its architecture and the main implementation choices.

关键词： source code analysis tools gcc XML GXL

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：