Read the abstract, see who wrote it and who cites it, and get the citation in APA, MLA, Chicago or Harvard.
About 10,000 papers for “source code analysis”
Oege de Moor, Mathieu Verbaere, Elnar Hajiyev et al. · 2007
Many tasks in source code analysis can be viewed as evaluating queries over a relational representation of the code. Here we present an object-oriented query language, named .QL, and demonstrate its use for general navigation, bug finding and enforcing coding conventions. We then focus on the particular problem of specifying metrics as queries.
Cited by 97
Wu, Xing Zheng · Figshare · 2017
Reliability analysis and multivariate statistical fitting are valuable techniques that enhance the scientific basis of regulatory decisions in geotechnical problems. The R environment is an emerging programming platform largely used for statistical computing in many areas. This study introduces the use of several new R packages specifically developed to assist risk assessors in their geotechnical projects. Firstly, the fitting of parameterised models to the average over a number of observed samples and/or to characterise the dependence structures among variables is presented. The usefulness of R packages is illustrated through a marginal and copula fitting to a data set. The non-parametric kernel density estimation and confidence limits in a joint model of associated multiple variables are also facilitated. Secondly, the most popular reliability analysis methods, such as the first- and second-order reliability methods (FORM and SORM) and the random sampling simulation method, are implemented in R. The efficiency of implementing these classical approximation methods is discussed, and two example problems are demonstrated, namely the bearing capacity of a rigid pile with two variables and the stability of an infinite slope with multiple variables. It is hoped that this demonstration can promote the use of advanced R tools for interpretation of the uncertainty in the decision-making process of geotechnical problems.<br><br>This manuscript has been published by Georisk, please cite it viahttp://www.tandfonline.com/doi/full/10.1080/17499518.2016.1201577Wu X.Z. Implementing statistical fitting and reliability analysis for geotechnical engineering problems in R. Georisk: Assessment and Management of Risk for Engineered Systems and Geohazards. 2017, 11(2):173-188.In comparison with the released edition, the current manuscript provides the source R codes for the illustrative examples. All codes are performed successfully in R 2.15.0.<br>
Cited by 0Open access
Olfat M. Mirza · Warwick Research Archive Portal (University of Warwick) · 2015
The enormous growth in the available online code resources has created new challenges for detecting plagiarism in source code of programs. Several software applications can detect source code similarity using different detection methods. However, few current detection tools detect every kind of detection plagiarism attack. The aim of this thesis is, therefore, to enhance methods for plagiarism detection in source code using a style analysis approach that has been used to detect authorship. \n \nThere are very few large source-code datasets which are suitable for research purposes, and two such datasets include the BlackBox dataset and the SOCO (Detection of SOurce COde) dataset. SOCO is a benchmark dataset that contains groups of similar source-code files that can be considered plagiarised and has been used in authorship and plagiarism detection competitions. \n \nIn the first part of the thesis, the suitability of BlackBox as source of datasets for testing plagiarism detection is explored. The files in BlackBox were analysed and visualised in order to evaluate its suitability as a dataset that can be used in this research. The analysis aimed to identify similar source code files, and therefore to detect groups of Java files within BlackBox that can be used for evaluating the performance of source-code plagiarism detection methods. \n \nIn the second part of the thesis, a plagiarism detection framework (\\the Metric-File Matrix Framework (MFM)" is proposed. The MFM framework is designed to overcome some of the limitations of existing plagiarism detection methods by 1) proposing a new set of metrics which consider structural and stylistic similarities; and 2) by using Singular Value Decomposition as a technique to remove noise and to reduce the dimensionality of the data to enhance the similarity detection. \n \nThe MFM framework was implemented and its performance was evaluated using the proposed metrics. For the evaluations, the SOCO dataset was adopted and the performance of the proposed framework was compared against other state-of- the-art plagiarism detection tools including JPlag.
Cited by 11Open access
liuhong-jia · Zenodo (CERN European Organization for Nuclear Research) · 2024
CellMap analysis source code, including data processing and analysis.
Cited by 0Open access
D. Hartley, Padmanabhan Krishnan · University of Canterbury Research Repository (University of Canterbury) · 2001
This paper summarises our experience in using model checking technology to understand concurrent programs. We use Verisoft to understand various aspects of a firewall tool kit. We instrument three components of the firewall tool kit with Verisoft hooks in order to test their behaviour. Some of the key changes include changing socket communication to message passing queues and adding appropriate synchronisations so that the behaviour of the system can be tracked. We aim to minimise the number of changes to the original source code so as to not affect its real behaviour. The main conclusion is that it is possible to inspect source code with a view towards verifying key behavioural properties. 1 1
Cited by 0Open access
J.J. (Jurgen) Vinju · Centrum Wiskunde & Informatica (CWI), the national research institute for mathematics and computer science in the Netherlands · 2013
Cited by 0
A. D. Bogdanova, Mirko Farina, Zamira Kholmatova et al. · 2022
Source Code Authorship Attribution (SCAA) has become very important for the functioning of our societies. For example, it is central in copyright and plagiarism issues, for detecting authors of malware, and even in recruitment and selection processes. The goal of this review is to analyze existing approaches to SCAA, compare them, and identify the most common feature types and architectures of neural networks underlying them. We identified the most common taxonomy of the feature types in SCAA. These are: a. lexical, b. layout, and c. structural. We also found that the combination of the lexical (most language agnostic) and structural (most language dependent) features usually provides the most accurate results.
Cited by 1
Attila Magyar · Advances in information security, privacy, and ethics book series · 2024
This study introduces a deep learning methodology aimed at identifying security vulnerabilities present in C/C++ source code files. Employing default tokenizers and encoders of the GPT-2 architecture, the approach involves pre-training and subsequent fine-tuning of a GPT-2 large language model using diverse C/C++ source code files sourced from various open-source projects. Evaluation of the model's efficacy is conducted through the detection of vulnerabilities within multiple datasets dedicated to source code vulnerability analysis. Findings from the evaluation demonstrate that appropriately trained and fine-tuned GPT-2 models utilizing default tokenizers and encoders produce results comparably favorable to alternative deep learning methodologies.
Cited by 1
Rebet Keith Jones · Advances in information security, privacy, and ethics book series · 2024
In recent years, deep learning techniques have garnered considerable attention for their effectiveness in identifying vulnerable code patterns with high precision. Nevertheless, leading models such as Convolutional Neural Networks (CNNs) and Long Short-Term Memory (LSTM) networks require extensive computational resources, resulting in overhead that poses challenges for real-time deployment. This study presents VulDetect, an innovative transformer-based framework for vulnerability detection, developed by fine-tuning a pre-trained large language model (GPT) on a variety of benchmark datasets containing vulnerable code. Our empirical analysis demonstrates that VulDetect achieves a vulnerability detection accuracy of up to 92.65%, surpassing SyseVR and VulDeBERT, two of the most advanced existing techniques for identifying software vulnerabilities.
Cited by 0
M.A.A. Klinik, J. Hage, J.M. Jansen et al. · DANS Data Station Physical and Technical Sciences · 2020
Source code accompanying the paperMarkus Klinik, Jurriaan Hage, Jan Martin Jansen, and Rinus Plasmeijer. Predicting resource consumption of higher-order workflows. In Proceedings of PEPM 2017, Paris, France, January 18-20, 2017, pages 99–110. ACM, 2017a. ISBN 978-1-4503-4721-1.CONTENTS- *.dcl/.icl: the Clean modules of the analyzer- *.prj: project files for the main program and the test- test: test cases for the corresponding Clean module, includes source code forthe TestFramework needed to run the tests- bash_completion.d: source this file in your .bashrc to get simplecommand-line completion for the mtasks command.- programs: example programs to demonstrate the analyzer- More information on how to compile and run this program can be found in README.txtSHORT SUMMARYWe present a type and effect system for the static analysis of programs written in a simplified version of iTasks.iTasks is a workflow specification language embedded in Clean, a general-purpose functional programming language.Given costs for basic tasks, our analysis calculates an upper bound of the total cost of a workflow.The analysis has to deal with the domain-specific features of iTasks, in particular parallel and sequential composition of tasks, as well as the general-purpose features of Clean, in particular let-polymorphism, higher-order functions, recursion and lazy evaluation.Costs are vectors of natural numbers where every element represents some resource, either consumable or reusable.
Cited by 0Open access
Jeong Yang, Christian Barrientes, Joshua Sanchez et al. · 2018
As the security landscape evolves and InfoSec professionals work to keep apace, modern day instructors face the issue of adequately equipping a new generation for this dynamic landscape. Cyber security, as a discipline, is currently going through an unprecedented growth, bringing attention to issues that are growing in importance. Using static analysis tools such as FindBugs, and an add-on of this tool, Find Security Bugs, this project thoroughly analyzed Java source code in the textbooks used at a collegiate level. The analysis consisted of testing significant code snippets in the books with respect to Java Development Kit (JDK) 9/10. Through this static security-oriented analysis of programming examples exercised at the collegiate level, we determine whether currently taught fundamental programming practices are keeping pace with the dynamic landscape, and it will also guide the instructors to better shape teaching programming from a security perspective as cyber security affects every software component in any computing system.
Cited by 4
Austin G. Fowler · arXiv (Cornell University) · 2013
The surface code is highly practical, enabling arbitrarily reliable quantum computation given a 2-D nearest-neighbor coupled array of qubits with gate error rates below approximately 1%. We describe an open source library, Polyestimate, enabling a user with no knowledge of the surface code to specify realistic physical quantum gate error models and obtain logical error rate estimates. Functions allowing the user to specify simple depolarizing error rates for each gate have also been included. Every effort has been made to make this library user-friendly.
Cited by 0Open access
Stephen Dewhurst, Chad R. Dougherty, David Keaton et al. · 2008
Cited by 0
B. Caprile, A. Potrich, P. Tonella et al. · CINECA IRIS Institutial Research Information System (University of Genoa) · 2003
Cited by 2
Daniel Ferreira Novais, Maria João Varanda Pereira, Pedro Rangel Henriques · DROPS (Schloss Dagstuhl – Leibniz Center for Informatics) · 2016
The present article reflects the progress of an ongoing master's dissertation on language engineering. The main goal of the work here described, is to infer a programmer's profile through the analysis of his source code. After such analysis the programmer shall be placed on a scale that characterizes him on his language abilities. There are several potential applications for such profiling, namely, the evaluation of a programmer's skills and proficiency on a given language or the continuous evaluation of a student's progress on a programming course. Throughout the course of this project and as a proof of concept, a tool that allows the automatic profiling of a Java programmer is under development. This tool is also introduced in the paper and its preliminary outcomes are discussed.
Cited by 4Open access
João Carlos Silva, Jose Creissac, Luis S. Barbosa et al. · 2015
Abstract: Graphical user interfaces (GUIs) are critical components of todays soft-ware. Given their increased relevance, correctness and usability of GUIs are becom-ing essential. This paper describes the latest results in the development of our tool to reverse engineer the GUI layer of interactive computing systems. We use static analysis techniques to generate models of the user interface behaviour from source code. Models help in graphical user interface inspection by allowing designers to concentrate on its more important aspects. One particular type of model that the tool is able to generate is state machines. The paper shows how graph theory can be useful when applied to these models. A number of metrics and algorithms are used in the analysis of aspects of the user interface’s quality. The ultimate goal of the tool is to enable analysis of interactive system through GUIs source code inspection.
Cited by 0
Békefi, Bianka Flóra · ELTE Digital Institutional Repository (EDIT) (Eötvös Loránd University) · 2018
A diplomamunka összefoglalja a különböző eredményeket a függvények mozgatására vonatkozó refaktorálással kapcsolatban és egy új módszert is javasol. A javasolt megoldás TTCN-3 nyelven írt programok kódminőségét javítja függvények modulok közötti átmozgatásával az optimalizációs paramétereknek megfelelően.
Cited by 0Open access
liuhong-jia · Zenodo (CERN European Organization for Nuclear Research) · 2024
CellMap analysis source code, including data processing and analysis.
Cited by 0Open access
Michael Kruse · 2016
Cited by 0
Slawomir Duszynski, Martin Becker, Ralf Kalmar · ATZ-Elektronik worldwide · 2012
Cited by 0