• Title/Summary/Keyword: static software analysis

Search Result 344, Processing Time 0.027 seconds

A Study on the Nonlinear Analysis of R/C Frames Structures subjected to Static Loads (철근콘크리트뼈대 구조물의 정적 비선형 해석에 관한 연구)

  • 심종성;조민수
    • Proceedings of the Korea Concrete Institute Conference
    • /
    • 1992.10a
    • /
    • pp.196-201
    • /
    • 1992
  • The purpose of this study is to develop the computer software for the nonlinear analysis of R/C frame structure under static loads. For this purpose, strain-rate dependant material model and physical element model considering both flexural and shear deformation are adopted and they are connected with 'TWO-D'which is commerical software for elastic structural analysis. The analytical results using the developed software are compared to the experiment results and they are generally satisfactory.

  • PDF

Defect-Type Analysis of Regional SW Development Companies using CodeSonar (CodeSonar를 이용한 지역 SW개발 업체의 결함 유형분석)

  • Noh, Jeong-Hyun;Lee, Jong-Min;Park, Yoo-Hyun
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.19 no.3
    • /
    • pp.683-688
    • /
    • 2015
  • Recently, various static analysis tools for software defect detection are becoming widely used in practice. However, there is little public information of the most frequent defects in commercial areas until now. In this paper, we analyze the defects found by CodeSonar, a static analysis tool that finds defects in C/C++, Java programs. So we report the most frequent defects by various aspects in Dongnam area, Korea.

A Case Study on Reliability Test of Embedded Software in the Multi-Function Radar (다기능레이더 소프트웨어 신뢰성시험 적용사례 및 결과)

  • Kim, Jong-Woo
    • Journal of IKEEE
    • /
    • v.19 no.3
    • /
    • pp.431-439
    • /
    • 2015
  • This paper introduces analysis technique and test procedure for verifying the reliability of the multi-function radar software. Also the process of software development and reliability test method for reducing the development period are described. Test results show that the verified software has reduced errors and improved reliability compared to the unverified software.

Static Analysis Tools Against Cross-site Scripting Vulnerabilities in Web Applications : An Analysis

  • Talib, Nurul Atiqah Abu;Doh, Kyung-Goo
    • Journal of Software Assessment and Valuation
    • /
    • v.17 no.2
    • /
    • pp.125-142
    • /
    • 2021
  • Reports of rampant cross-site scripting (XSS) vulnerabilities raise growing concerns on the effectiveness of current Static Analysis Security Testing (SAST) tools as an internet security device. Attentive to these concerns, this study aims to examine seven open-source SAST tools in order to account for their capabilities in detecting XSS vulnerabilities in PHP applications and to determine their performance in terms of effectiveness and analysis runtime. The representative tools - categorized as either text-based or graph-based analysis tools - were all test-run using real-world PHP applications with known XSS vulnerabilities. The collected vulnerability detection reports of each tool were analyzed with the aid of PhpStorm's data flow analyzer. It is observed that the detection rates of the tools calculated from the total vulnerabilities in the applications can be as high as 0.968 and as low as 0.006. Furthermore, the tools took an average of less than a minute to complete an analysis. Notably, their runtime is independent of their analysis type.

The Experimental Comparison of Fault Detection Efficiency of Static Code Analysis Tools for Software RAMS (소프트웨어 RAMS를 위한 정적기법을 이용한 코드 결함 검출 효율성에 관한 실험적 비교)

  • Jang, Jeong-Hoon;Yun, Cha-Jung;Jang, Ju-Su;Lee, Won-Taek;Lee, Eun-Kyu
    • Proceedings of the KSR Conference
    • /
    • 2011.10a
    • /
    • pp.2493-2502
    • /
    • 2011
  • For Static analysis of software code, an experienced tester prefer detecting defects with using selective static technique. Many cases of static method have been reported such as coding rules, software metrics, defect data, etc. However, many of analysis case only present effectiveness of static analysis, not enough description for how the tester judged to classify code defects used in code analysis and removed them properly for ensure high quality. Occasionally, there are materials to show the effect of through some examples through some examples. But difficult to gain trust, because of not enough detail for application process. In this paper, introduced the static technique commonly used in railway and applied to the real development challenges. And the each of results were compared and analyzed. It is hard to generalize the results of this parer. But can be used and referenced as a case of study.

  • PDF

A Study on Software Security Vulnerability Detection Using Coding Standard Searching Technique (코딩 표준 검색 기법을 이용한 소프트웨어 보안 취약성 검출에 관한 연구)

  • Jang, Young-Su
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.29 no.5
    • /
    • pp.973-983
    • /
    • 2019
  • The importance of information security has been increasingly emphasized at the national, organizational, and individual levels due to the widespread adoption of software applications. High-safety software, which includes embedded software, should run without errors, similar to software used in the airline and nuclear energy sectors. Software development techniques in the above sectors are now being used to improve software security in other fields. Secure coding, in particular, is a concept encompassing defensive programming and is capable of improving software security. In this paper, we propose a software security vulnerability detection method using an improved coding standard searching technique. Public static analysis tools were used to assess software security and to classify the commands that induce vulnerability. Software security can be enhanced by detecting Application Programming Interfaces (APIs) and patterns that can induce vulnerability.

Analysis on Software Static Testing Results of Railway Signaling System (열차제어시스템 소프트웨어 정적 테스팅 적용시험 결과 분석)

  • Hwang, Jong-Gyu;Jo, Hyun-Jeong;Jeong, Rak-Gyo
    • The Transactions of the Korean Institute of Electrical Engineers P
    • /
    • v.62 no.1
    • /
    • pp.30-35
    • /
    • 2013
  • Many function of railway signalling system which is in charge of most core function in a railway system are being operated by the software according to the development of computer technology. Accordingly, the source code testing to verify the safety of the railway signalling system software becomes to be more important, and related international standards highly recommend verifications on the source code also. For this reason, several related studies on vital source code verification were executed from several years ago in Korea. This paper performed tests through the application to railway signalling system being applied to the existing actual domestic railway sites through automated testing tools for coding rules of signalling system software and another signaling system software under development in Korea recently, and analyzed their results.

Static load test of the bogie and vibration performance test, dynamic characteristics analysis of the bulk cement car (벌크시멘트화차의 대차 하중시험과 진동성능시험 및 동특성 해석 연구)

  • 홍재성;함영삼;백영남
    • Journal of the Korean Society for Railway
    • /
    • v.6 no.3
    • /
    • pp.186-193
    • /
    • 2003
  • The object of this study is to ensure the stability of bulk cement cars conducting vibration performance test, dynamic characteristic analysis and static load test of bogie frame. In case of static load test, bogie static load test facility was used. In case of dynamic characteristic analysis, Vampire Software was used. In case of vibration performance test, real bulk cement cars were used in kyeung-bu line. In the results of static load test of bogie frame for bulk cement car, all structures satisfied allowable stress criteria of materials. The vibration performance test and dynamic characteristic analysis results satisfied allowable standards.

Development of Design Technology of Turbine Bearings for Power Plants (발전설비용 터빈베어링의 설계 기술 개발)

  • 하현천;양승헌;변형현
    • Proceedings of the Korean Society of Tribologists and Lubrication Engineers Conference
    • /
    • 1997.04a
    • /
    • pp.253-259
    • /
    • 1997
  • A software for design of turbine bearings has been developed based on both the theoretical analysis and experimental investigation. Static and dynamic performance, i.e. load capacity, frictional loss, temperature distribution, stiffness and damping coefficients, stability etc., can be obtained by using this software taking into account the effects of three dimensional variation of lubricant viscosity, turbulence and inlet pressure. A performance test rig was developed by self-design and technology, which was used to verify static and dynamic characteristics and to investigate the proper boundary conditions for theoretical analysis. Consequently HANJUNG has developed the self-design technology for design of turbine bearings for power plants.

  • PDF

Distributed Information Extraction in Wireless Sensor Networks using Multiple Software Agents with Dynamic Itineraries

  • Gupta, Govind P.;Misra, Manoj;Garg, Kumkum
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.8 no.1
    • /
    • pp.123-144
    • /
    • 2014
  • Wireless sensor networks are generally deployed for specific applications to accomplish certain objectives over a period of time. To fulfill these objectives, it is crucial that the sensor network continues to function for a long time, even if some of its nodes become faulty. Energy efficiency and fault tolerance are undoubtedly the most crucial requirements for the design of an information extraction protocol for any sensor network application. However, most existing software agent based information extraction protocols are incapable of satisfying these requirements because of static agent itineraries and large agent sizes. This paper proposes an Information Extraction protocol based on Multiple software Agents with Dynamic Itineraries (IEMADI), where multiple software agents are dispatched in parallel to perform tasks based on the query assigned to them. IEMADI decides the itinerary for an agent dynamically at each hop using local information. Through mathematical analysis and simulation, we compare the performance of IEMADI with a well known static itinerary based protocol with respect to energy consumption and response time. The results show that IEMADI provides better performance than the static itinerary based protocols.