• Journal of Software Assessment and Valuation
• /
• v.17 no.2
• /
• pp.125-142
• /
• 2021

Reports of rampant cross-site scripting (XSS) vulnerabilities raise growing concerns on the effectiveness of current Static Analysis Security Testing (SAST) tools as an internet security device. Attentive to these concerns, this study aims to examine seven open-source SAST tools in order to account for their capabilities in detecting XSS vulnerabilities in PHP applications and to determine their performance in terms of effectiveness and analysis runtime. The representative tools - categorized as either text-based or graph-based analysis tools - were all test-run using real-world PHP applications with known XSS vulnerabilities. The collected vulnerability detection reports of each tool were analyzed with the aid of PhpStorm's data flow analyzer. It is observed that the detection rates of the tools calculated from the total vulnerabilities in the applications can be as high as 0.968 and as low as 0.006. Furthermore, the tools took an average of less than a minute to complete an analysis. Notably, their runtime is independent of their analysis type.

• Proceedings of the Korean Society of Machine Tool Engineers Conference
• /
• 2000.04a
• /
• pp.653-658
• /
• 2000

For testing machine tools, we used test the work by measure of 3-D object that it was made by the machine tool. By reason of these, we have spent to the cost of measure and have delayed supply to user. In this study, we made a macro-program and a application program in order to test automatic the machine tool. So, if you constitute a ring core and a touch prove in machine tool, you should test the property of machine tool.

• The Journal of Korean Academy of Sensory Integration
• /
• v.11 no.2
• /
• pp.41-56
• /
• 2013

Objective : The purpose of this study tried to present the performed average and range through systematic review about assessment tools that measures the praxis ability of sensory integrative function for foreign and domestic normal children. Methods: With making use of Medline, PubMed, Ovid, Eric, the Library of Congress, National Science and Technology Information Center, Kiss, RISS, and the Google search engine, we searched the name of assessment tool on the basis of the framework of the theory of sensory integration. Target paper was thesis and Journal published from January 2000 to April 2011. Results: Total of 24 papers were retrieved, used assessment tools were Bruininks-Oseretsky Test of Motor Proficiency (BOTMP), Bruininks-Oseretsky Test of Motor Proficiency, Short Form (BOTMP-SF), Bruininks-Oseretsky Test of Motor Proficiency, Second Edition (BOT-2), Bruininks-Oseretsky Test of Motor Proficiency, Second Edition, Short Form (BOT-2-SF), Clinical Observations of Motor and Postural Skills (COMPS), Motor Assessment Battery for Children (MABC), Clinical Test of Sensory Interaction with Balance (CTSIB), and subtest of Sensory Integration and Praxis Test (SIPT). We presented the average and range of assessment tools applied to normal children in each country. Conclusion: A performed result in other cultural and domestic normal children which this study presented will provide a standard in comparison with performance of children with disabilities who are the actual clinical evaluation.

• Proceedings of the Korean Society of Precision Engineering Conference
• /
• 2007.11a
• /
• pp.125-126
• /
• 2007

• Proceedings of the Korean Society of Machine Tool Engineers Conference
• /
• 2002.10a
• /
• pp.435-439
• /
• 2002

In view of reliability assessment, the failure mode analysis by performance tests for machine tools is researched in this study. First, the error analysis with circular movement test data is studied. The various errors and their origins are analyzed by the error equations and then related parts and failure modes are investigated. Second, This paper deals with analysis of vibration testing for machine tools spindle. The various frequency components are classified by fourier transform and order analysis. The simple measuring devices and web-based analysis programs for each test are also developed.

• International Journal of Naval Architecture and Ocean Engineering
• /
• v.6 no.2
• /
• pp.269-281
• /
• 2014

This paper examines the suitability of using the Computational Fluid Dynamics (CFD) tools, ANSYS-CFX, as an initial analysis tool for predicting the drag and propulsion performance (thrust and torque) of a concept underwater vehicle design. In order to select an appropriate thruster that will achieve the required speed of the Underwater Disk Robot (UDR), the ANSYS-CFX tools were used to predict the drag force of the UDR. Vertical Planar Motion Mechanism (VPMM) test simulations (i.e. pure heaving and pure pitching motion) by CFD motion analysis were carried out with the CFD software. The CFD results reveal the distribution of hydrodynamic values (velocity, pressure, etc.) of the UDR for these motion studies. Finally, CFD bollard pull test simulations were performed and compared with the experimental bollard pull test results conducted in a model basin. The experimental results confirm the suitability of using the ANSYS-CFX tools for predicting the behavior of concept vehicles early on in their design process.

• Proceedings of the Korean Geotechical Society Conference
• /
• 2002.11a
• /
• pp.27-52
• /
• 2002

Pile driving formula, wave equation analysis of pile driving(WEAP) and dynamic pile loading test have been known to useful tools to appraise the behaviour of pile driving. This paper reviews basic theories of three methods and gives some suggestions to apply them to practice. And also some cases on application of the methods to the sites are discussed in this paper. It appears that it is inevitable for engineers to be experienced well so that the methods can be regarded as useful tools.

• Journal of the Korean Society for Precision Engineering
• /
• v.26 no.10
• /
• pp.7-11
• /
• 2009

• Journal of the Korea Society of Computer and Information
• /
• v.10 no.3 s.35
• /
• pp.89-99
• /
• 2005

The testing time and cost of developed software can be reduced by automation of the whole or part of testing process. Since the testing automation tools to be used currently have been developed without their interoperability, test case information such as test procedures, test data, and expectation of test results generated at the stage of test execution cannot be shared and reused in other testing automation tools, In order to reduce testing time and cost, in this thesis, we have proposed a software testing automation framework which makes it possible to share and reuse the test case information generated in testing process. To prove the availability and effectiveness of proposed testing automation framework, three testing automation tools that are available in current market were experimented by the test scenario. As a result of experiment, the testing time and cost could be reduced by sharing and reusing the test case information in software testing automation framework.

• Transactions of the Korean Society of Machine Tool Engineers
• /
• v.14 no.1
• /
• pp.15-23
• /
• 2005

For reliability assessment for machine tools, failure mode analyses by two viewpoints were studied in this paper. First, this study developed the reliability data analysis program, which searches f3r optimal failure distribution like failure rate or MTBF(Mean Time Between Failure) using failure data and reliability test data of mechanical parts in the web. Moreover, this data analysis program saves both failure data or reliability data and their failure rate or MTBF for database establishment. Second, this paper conducted failure mode analysis through such performance tests as circular movement test and vibration testing for machine tools when reliability data is not available. A developed web-based analysis program shows correlations between failure mode and performance test result and also accumulates all the data. These kinds of data analysis programs and stored data furnish valuable information for improving the reliability of mechanical system.