Roberto A. Riquelme Torres · 2004
Code duplication exists for many reasons, although it is known to be a bad practice. It may save costs on the development phase, but it surely has a higher cost of maintenance. What can we do to detect and eliminate those problems? This document shows how to use the mathematical foundation of Formal Concept Analysis to detect code duplication. Formal Concept Analysis allows us to identify concepts, or groupings of elements, that have common properties. We work with a particular kind of elements and properties: Methods containing similar Regular Parse Tree Expressions. We classify these concepts in a certain way to reveal candidates for code duplication refactorings and show them in an ordered way, so that the user can decide to apply the refactoring when needed. This work is done as an extension of the existing Delfstof framework for VisualWorks Smalltalk, which is currently being developed by researchers at CWI and UCL.
Cited by 0
Reuben, Maor, Mendel, Ido, Feldman, Or et al. · ArXiv.org · 2025
Supply chain attacks significantly threaten software security with malicious code injections within legitimate projects. Such attacks are very rare but may have a devastating impact. Detecting spurious code injections using automated tools is further complicated as it often requires deciphering the intention of both the inserted code and its context. In this study, we propose an unsupervised approach for highlighting spurious code injections by quantifying cohesion disruptions in the source code. Using a name-prediction-based cohesion (NPC) metric, we analyze how function cohesion changes when malicious code is introduced compared to natural cohesion fluctuations. An analysis of 54,707 functions over 369 open-source C++ repositories reveals that code injection reduces cohesion and shifts naming patterns toward shorter, less descriptive names compared to genuine function updates. Considering the sporadic nature of real supply-chain attacks, we evaluate the proposed method with extreme test-set imbalance and show that monitoring high-cohesion functions with NPC can effectively detect functions with injected code, achieving a Precision@100 of 36.41% at a 1:1,000 ratio and 12.47% at 1:10,000. These results suggest that automated cohesion measurements, in general, and name-prediction-based cohesion, in particular, may help identify supply chain attacks, improving source code integrity.
Cited by 0Open access
Tierney, Tim, Alexander, Nicholas A., Ashburner, John et al. · Figshare · 2025
This archive contains a branch of SPM 25.01, which includes the Markdown source code for the upcoming paper in the Journal of Open Source Software. For research use, please use the latest release of SPM from Github.
Cited by 0Open access
Tierney, Tim, Alexander, Nicholas A., Ashburner, John et al. · Research Portal (King's College London) · 2025
This archive contains a branch of SPM 25.01, which includes the Markdown source code for the upcoming paper in the Journal of Open Source Software. For research use, please use the latest release of SPM from Github.
Cited by 0Open access
Barry Gergel, Eleni Stroulia, Michael Smit et al. · University of Alberta Library · 2011
Cited by 16Open access
João Nuno Carvalho de Matos · Open Repository of the University of Porto (University of Porto) · 2022
Cited by 0Open access
Konrad Weiß, Christian Banse · arXiv (Cornell University) · 2022
In this paper, we present the CPG analysis platform, which enables the translation of source code into a programming language-independent representation, based on a code property graph. This allows security experts and developers to capture language level semantics for security analyses or identify patterns with respect to code compliance. Through the use of fuzzy parsing, also incomplete or non-compilable code, written in different programming languages, can be analyzed. The platform comprises an analysis library and interfaces to query, interact with or visualize source code graphs. This set of CPG tools allows finding common weaknesses in heterogeneous software environments, independently of the underlying programming language.
Cited by 4Open access
D. L. Stein, István Ráth · 2014
Cited by 0
2008
Tools that analyze and enhance large-scale software systems using symbolic reasoning are computationally expensive, and yet processors are cheap. We believe that enabling tools with parallel foundations will lead to qualitatively more useful tools. We have implemented a large-scale industrial-strength program transformation system, the DMS Software Reengineering Toolkit, entirely in PARLANSE, a new parallel language. PARLANSE provides support for irregular fine-grain parallelism with zero-cost exception handling. This paper sketches the motivation for PARLANSE, its parallelism support and how it is used in a number of DMS-based applications, including parallel rewriting and attribute evaluation.
Cited by 0
Vinju, Jurgen · Data Archiving and Networked Services (DANS) · 2013
Cited by 0
CHE, SHIYING · Zenodo (CERN European Organization for Nuclear Research) · 2026
Cited by 0Open access
Reinpeter Ondeyo Momanyi, Mugotitsa, Bylhah · Zenodo (CERN European Organization for Nuclear Research) · 2024
A systematic review and meta-analysis to examine the efficacy of psychological interventions for mental health disorders among university students in Africa.
Cited by 0Open access
Kaique Mancuzo, André Ricardo Backes · 2026
Cited by 0
Kala, Zdeněk · Zenodo (CERN European Organization for Nuclear Research) · 2025
This archive contains the Delphi implementation used to compute the Sobol sensitivity indices presented in Figure 9 of the article: Kala, Z. Closed Form Design Quantiles under Skewness and Kurtosis: A Hermite Approach to Structural Reliability, Mathematics, 2025. The program evaluates the performance function of the two-bar tie system, performs tensor-product quadrature over four random input variables, and computes the first-order and total Sobol indices. Running the program reproduces the sensitivity indices published in the manuscript. The code is a research prototype provided for transparency and reproducibility. It is not a general-purpose GSA library and is not intended for engineering design without expert verification.
Cited by 0Open access
Kala, Zdeněk · Zenodo (CERN European Organization for Nuclear Research) · 2025
This archive contains the Delphi implementation used to compute the Sobol sensitivity indices presented in Figure 9 of the article: Kala, Z. Closed Form Design Quantiles under Skewness and Kurtosis: A Hermite Approach to Structural Reliability, Mathematics, 2025. The program evaluates the performance function of the two-bar tie system, performs tensor-product quadrature over four random input variables, and computes the first-order and total Sobol indices. Running the program reproduces the sensitivity indices published in the manuscript. The code is a research prototype provided for transparency and reproducibility. It is not a general-purpose GSA library and is not intended for engineering design without expert verification.
Cited by 0Open access
Sergio J. Rey, Sergio J. Rey · 2014
This paper considers the intersection of academic spatial analysis with the open source revolution. Its basic premise is that the potential for cross-fertilization between the two is rich, yet some misperceptions about these two communities pose challenges to realizing these oppor-tunities. The paper provides a primer on the open source movement for academicians with an eye towards correcting these misperceptions. It identifies a number of ways in which increased adoption of open source practices in spatial analysis can enhance the development of the next generation of tools and the wider practice of scientific research and education. 1
Cited by 0
Roman Haas, Rainer Niedermayr, Tobias Röhm et al. · 2019
Grown software systems often contain code that is not necessary anymore. Unnecessary code wastes resources during development and maintenance, for example, when preparing code for migration or certification. Running a profiler may reveal code that is not used in production, but it is often time-consuming to obtain representative data this way. We investigate to what extent a static analysis approach which is based on code stability and code centrality, is able to identify unnecessary code and whether its recommendations are relevant in practice. To study the feasibility and usefulness of our static approach, we conducted a study involving 14 open-source and closed-source software systems. As there is no perfect oracle for unnecessary code, we compared recommendations of our approach with historical cleanup actions, runtime usage data, and feedback from 25 developers of 5 software projects. Our study shows that recommendations generated from stability and centrality information point to unnecessary code. Our results suggest that static analysis can provide quick feedback on unnecessary code that is useful in practice.
Cited by 1
Бураков Вадим Витальевич, Боровков Алексей Иванович · CyberLeninK (CyberLeninka)
Cited by 0
Dolejší, Jakub · Brno University of Technology Digital Library (Brno University of Technology) · 2020
Tato bakalářská práce se zabývá návrhem a vývojem webové aplikace RepView. Tento nástroj slouží k interaktivní revizi zdrojových kódů na základě příslušného reportu analýzy zdrojových kódů. Aplikace se skládá ze dvou oddělených služeb, které běží v separátních kontejnerech technologie Docker. Cílem aplikace je usnadnit interpretaci reportu a jeho vazbu na zdrojové kódy. Výsledku je dosaženo za použití moderních webových technologií (Vuejs, Quasar), které umožňují provést uživatelsky přívětivou revizi zdrojových kódů.
Cited by 0
Reinpeter Ondeyo Momanyi, Mugotitsa, Bylhah · Zenodo (CERN European Organization for Nuclear Research) · 2024
A systematic review and meta-analysis to examine the efficacy of psychological interventions for mental health disorders among university students in Africa.
Cited by 0Open access