• Title/Summary/Keyword: static software analysis

Search Result 344, Processing Time 0.028 seconds

Detecting Java Class Theft using Static API Trace Birthmark (정적 API 트레이스 버스마크를 이용한 자바 클래스 도용 탐지)

  • Park, Hee-Wan;Choi, Seok-Woo;Lim, Hyun-Il;Han, Tai-Sook
    • Journal of KIISE:Computing Practices and Letters
    • /
    • v.14 no.9
    • /
    • pp.911-915
    • /
    • 2008
  • Software birthmark is the inherent characteristics that can identify a program. In this paper, we propose a Java class theft detection technique based on static API traces of class files. We utilize control flow analysis to increase resilience, and we apply the semi-global alignment trace comparison algorithm to increase credibility. The credibility and resilience experiments for XML parsers show that our birthmark is more efficient than existing birthmarks.

An analysis of the switching Software Matrics : Case study (통신 소프트웨어의 복잡도 분석 사례 연구)

  • 이재기;신상권;남상식;김창봉
    • Proceedings of the IEEK Conference
    • /
    • 2002.06a
    • /
    • pp.409-412
    • /
    • 2002
  • The software complexity model makes an estimated of the product software. For a practice of software managed, need to guideline of the static analysis. Especially, Software complexity model introduced for the estimation of software quantity. In case of measurement the software matrices, its need for us to analysis of software qualify and products. In this paper, we represent that the analysis of function point, control structure and interface, volume matrices in various aspect of switching software. Others, their results utilized similar of project and system development.

  • PDF

Research on Major Weakness Rules for Secure Software Development (소프트웨어 개발 보안성 강화를 위한 주요 보안약점 진단규칙 연구)

  • Bang, Jiho;Ha, Rhan
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.38C no.10
    • /
    • pp.831-840
    • /
    • 2013
  • Recently, to enhance the security of software, static analysis tools for removing weaknesses, the cause of vulnerability, have been used a lot in the software development stage. Therefore, the tools need to have the rules being able to diagnose various weaknesses. Top 5 weaknesses found in the software developed by major domestic information projects from 2011 to 2012 is 76% of top 10 weaknesses per year. Software security can be improved a lot if top 5 weaknesses just are removed properly in software development. In this paper, we propose the PMD's rules for diagnosing the major weaknesses and present the results of its performance test.

How to Prevent Software crack for Control PE (PE Format 조작을 통한 소프트웨어 크랙 방지 기술)

  • Kim, Tae-hyoung;Jang, Jong-uk
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2017.05a
    • /
    • pp.249-251
    • /
    • 2017
  • In the past, People thought that software security was not important. but Skills of attacking software has growing up in fast, software crack fall down software industry growth and profit of copyright holder was declined. So I propose software crack prevention for changing PE Format. Hackers can analyze program in static. As we change the PE format, we can prevent static analysis. As I insert anti - debugging code the exe file, the program is protected from dynamic analysis.

  • PDF

Quality Visualization of Quality Metric Indicators based on Table Normalization of Static Code Building Information (정적 코드 내부 정보의 테이블 정규화를 통한 품질 메트릭 지표들의 가시화를 위한 추출 메커니즘)

  • Chansol Park;So Young Moon;R. Young Chul Kim
    • KIPS Transactions on Software and Data Engineering
    • /
    • v.12 no.5
    • /
    • pp.199-206
    • /
    • 2023
  • The current software becomes the huge size of source codes. Therefore it is increasing the importance and necessity of static analysis for high-quality product. With static analysis of the code, it needs to identify the defect and complexity of the code. Through visualizing these problems, we make it guild for developers and stakeholders to understand these problems in the source codes. Our previous visualization research focused only on the process of storing information of the results of static analysis into the Database tables, querying the calculations for quality indicators (CK Metrics, Coupling, Number of function calls, Bad-smell), and then finally visualizing the extracted information. This approach has some limitations in that it takes a lot of time and space to analyze a code using information extracted from it through static analysis. That is since the tables are not normalized, it may occur to spend space and time when the tables(classes, functions, attributes, Etc.) are joined to extract information inside the code. To solve these problems, we propose a regularized design of the database tables, an extraction mechanism for quality metric indicators inside the code, and then a visualization with the extracted quality indicators on the code. Through this mechanism, we expect that the code visualization process will be optimized and that developers will be able to guide the modules that need refactoring. In the future, we will conduct learning of some parts of this process.

Static and dynamic finite element analysis of honeycomb sandwich structures

  • Triplett, Matt H.;Schonberg, William P.
    • Structural Engineering and Mechanics
    • /
    • v.6 no.1
    • /
    • pp.95-113
    • /
    • 1998
  • The extensive use of honeycomb sandwich structures has led to the need to understand and analyze their low velocity impact response. Commercially available finite element software provides a possible analysis tool for this type of problem, but the validity of their material properties models for honeycomb materials must be investigated. Three different problems that focus on the effect of differences in honeycomb material properties on static and dynamic response are presented and discussed. The first problem considered is a linear elastic static analysis of honeycomb sandwich beams. The second is a nonlinear elastic-plastic analysis of a circular honeycomb sandwich plate. The final problem is a dynamic analysis of circular honeycomb sandwich plates impacted by low velocity projectiles. Results are obtained using the ABAQUS final element code and compared against experimental results. The comparison indicates that currently available material properties models for honeycomb materials can be used to obtain a good approximation of the behavior of honeycomb sandwich structures under static and dynamic loading conditions.

Pushover analysis of gabled frames with semi-rigid connections

  • Shooshtari, Ahmad;Moghaddam, Sina Heyrani;Masoodi, Amir R.
    • Steel and Composite Structures
    • /
    • v.18 no.6
    • /
    • pp.1557-1568
    • /
    • 2015
  • The nonlinear static analysis of structure, which is under the effect of lateral loads and provides the capacity curve of the structure, is defined as a push-over analysis. Ordinarily, by using base shear and the lateral displacement of target point, the capacity curve is obtained. The speed and ease of results interpretation in this method is more than that of the NRHA responses. In this study, the nonlinear static analysis is applied on the semi-rigid steel gabled frames. It should be noted that the members of this structure are analyzed as a prismatic beam-column element in two states of semi-rigid connections and supports. The gabled frame is modeled in the OpenSees software and analyzed based on the displacement control at the target point. The lateral displacement results, calculated in the top level of columns, are reported. Furthermore, responses of the structure are obtained for various support conditions and the rigidity of nodal connections. Ultimately, the effect of semi-rigid connections and supports on the capacity and the performance point of the structure are presented in separated graphs.

A Case Study on the Improvement of Software Test Effectiveness through Static Testing (정적 테스트를 통한 소프트웨어 테스트 효율성 향상에 대한 사례 연구)

  • Kim, Hyo-Young;Han, Hyuk-Soo
    • Journal of KIISE:Software and Applications
    • /
    • v.34 no.3
    • /
    • pp.212-218
    • /
    • 2007
  • Not enough verification or enough design of test is not performing in many software developments organization as yet. Therefore, defects that can be detected and corrected during the beginning phases of development are usually found during dynamic testing, it is often observed that testing is inefficient compared to effort for testing. This study aims to suggest a method for effective testing through case study. It is useful in case of not verification and not enough design of test in the previous phase than coding. We show in a concrete way major activities that determine prioritization of testing and level of test case design through static testing, i.e. code review and analysis of code quality. And also we show role between test team and development team.

Analysis of the Efficiency of National SW R&D Projects Using DEA (DEA를 활용한 SW 국가연구개발사업 효율성 분석)

  • Ro, Seok-Hyun;Cho, Nam-Wook
    • The Journal of Society for e-Business Studies
    • /
    • v.26 no.2
    • /
    • pp.45-59
    • /
    • 2021
  • As software(SW) has been considered as a key driver of the fourth industrial revolution, significant R&D investment has been made by Korean government. Despite the attention and support by the government, systematic analysis on the SW R&D efficiency has not been fully addressed. In this study, the efficiency of SW national research and development projects was analyzed using Data Envelopment Analysis(DEA) techniques. Efficiency was measured from both static and dynamic perspectives based on 1,463 projects conducted by the National IT Industry Promotion Agency(NIPA) from 2008 to 2018. The static efficiency analysis identified the causes of inefficiency as scale and technology problems. As a result of dynamic efficiency analysis, we present a sector-specific response model using an efficiency-stability matrix. This study is meaningful in that efficiency analysis was conducted on the entire SW national R&D project, and static/dynamic efficiency analysis results are expected to be used as a guideline for planning SW national R&D project.

EVALUATION OF STATIC ANALYSIS TOOLS USED TO ASSESS SOFTWARE IMPORTANT TO NUCLEAR POWER PLANT SAFETY

  • OURGHANLIAN, ALAIN
    • Nuclear Engineering and Technology
    • /
    • v.47 no.2
    • /
    • pp.212-218
    • /
    • 2015
  • We describe a comparative analysis of different tools used to assess safety-critical software used in nuclear power plants. To enhance the credibility of safety assessments and to optimize safety justification costs, $Electricit{\acute{e}}$ de France (EDF) investigates the use of methods and tools for source code semantic analysis, to obtain indisputable evidence and help assessors focus on the most critical issues. EDF has been using the PolySpace tool for more than 10 years. Currently, new industrial tools based on the same formal approach, Abstract Interpretation, are available. Practical experimentation with these new tools shows that the precision obtained on one of our shutdown systems software packages is substantially improved. In the first part of this article, we present the analysis principles of the tools used in our experimentation. In the second part, we present the main characteristics of protection-system software, and why these characteristics are well adapted for the new analysis tools. In the last part, we present an overview of the results and the limitations of the tools.