2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER)最新文献_第7页

Hindsight: Revealing the evolution of dependencies to developers 后见之明:向开发人员揭示依赖关系的演变

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884664

George Ganea

引用次数: 0

The Spartanizer: Massive automatic refactoring Spartanizer:大规模的自动重构

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884657

J. Gil, Matteo Orrù

引用次数: 7

Modernizing domain-specific languages with XMLText and IntellEdit 使用XMLText和intellit实现领域特定语言的现代化

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884679

Patrick Neubauer, Robert Bill, M. Wimmer

引用次数: 1

Conventionality analysis of array objects in JavaScript JavaScript中数组对象的约定性分析

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884677

Astrid Younang, Lunjin Lu

引用次数: 0

An exploratory study on library aging by monitoring client usage in a software ecosystem 通过监测软件生态系统中客户端使用情况对图书馆老化的探索性研究

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884643

R. Kula, D. Germán, T. Ishio, Ali Ouni, Katsuro Inoue

{"title":"An exploratory study on library aging by monitoring client usage in a software ecosystem","authors":"R. Kula, D. Germán, T. Ishio, Ali Ouni, Katsuro Inoue","doi":"10.1109/SANER.2017.7884643","DOIUrl":"https://doi.org/10.1109/SANER.2017.7884643","url":null,"abstract":"In recent times, use of third-party libraries has become prevalent practice in contemporary software development. Much like other code components, unmaintained libraries are a cause for concern, especially when it risks code degradation over time. Therefore, awareness of when a library should be updated is important. With the emergence of large libraries hosting repositories such as Maven Central, we can leverage the dynamics of these ecosystems to understand and estimate when a library is due for an update. In this paper, based on the concepts of software aging, we empirically explore library usage as a means to describe its age. The study covers about 1,500 libraries belonging to the Maven software ecosystem. Results show that library usage changes are not random, with 81.7% of the popular libraries fitting typical polynomial models. Further analysis show that ecosystem factors such as emerging rivals has an effect on aging characteristics. Our preliminary findings demonstrate that awareness of library aging and its characteristics is a promising step towards aiding client systems in the maintenance of their libraries.","PeriodicalId":6541,"journal":{"name":"2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER)","volume":"49 1","pages":"407-411"},"PeriodicalIF":0.0,"publicationDate":"2017-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"76292622","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 13

The importance of program Design Patterns training 程序设计模式培训的重要性

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884676

Viggo Holmstedt, S. A. Mengiste

引用次数: 0

Towards continuous software release planning 朝着持续的软件发布计划发展

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884642

David Ameller, Carles Farré, Xavier Franch, Danilo Valerio, Antonino Cassarino

引用次数: 17

UAV: Warnings from multiple Automated Static Analysis Tools at a glance 无人机:多个自动静态分析工具的警告一览无余

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884656

Tim Buckers, Clinton Cao, M. Doesburg, Boning Gong, Sunwei Wang, M. Beller, A. Zaidman

{"title":"UAV: Warnings from multiple Automated Static Analysis Tools at a glance","authors":"Tim Buckers, Clinton Cao, M. Doesburg, Boning Gong, Sunwei Wang, M. Beller, A. Zaidman","doi":"10.1109/SANER.2017.7884656","DOIUrl":"https://doi.org/10.1109/SANER.2017.7884656","url":null,"abstract":"Automated Static Analysis Tools (ASATs) are an integral part of today's software quality assurance practices. At present, a plethora of ASATs exist, each with different strengths. However, there is little guidance for developers on which of these ASATs to choose and combine for a project. As a result, many projects still only employ one ASAT with practically no customization. With UAV, the Unified ASAT Visualizer, we created an intuitive visualization that enables developers, researchers, and tool creators to compare the complementary strengths and overlaps of different Java ASATs. UAV's enriched treemap and source code views provide its users with a seamless exploration of the warning distribution from a high-level overview down to the source code. We have evaluated our UAV prototype in a user study with ten second-year Computer Science (CS) students, a visualization expert and tested it on large Java repositories with several thousands of PMD, FindBugs, and Checkstyle warnings. Project Website: https://clintoncao.github.io/uav/","PeriodicalId":6541,"journal":{"name":"2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER)","volume":"477 ","pages":"472-476"},"PeriodicalIF":0.0,"publicationDate":"2017-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"91451927","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 18

Code of conduct in open source projects 开源项目的行为准则

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884606

Parastou Tourani, Bram Adams, Alexander Serebrenik

引用次数: 91

Computing counter-examples for privilege protection losses using security models 使用安全模型计算特权保护损失的反例

2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) Pub Date : 2017-02-01 DOI: 10.1109/SANER.2017.7884625

Marc-André Laverdière, E. Merlo

{"title":"Computing counter-examples for privilege protection losses using security models","authors":"Marc-André Laverdière, E. Merlo","doi":"10.1109/SANER.2017.7884625","DOIUrl":"https://doi.org/10.1109/SANER.2017.7884625","url":null,"abstract":"Role-Based Access Control (RBAC) is commonly used in web applications to protect information and restrict operations. Code changes may affect the security of the application and need to be validated, in order to avoid security vulnerabilities, which is a major undertaking. A statement suffers from privilege protection loss in a release pair when it was definitely protected on all execution paths in the previous release and is now reachable by some execution paths with an inferior privilege protection. Because the code change and the resulting privilege protection loss may be distant (e.g. in different functions or files), developers may find it difficult to diagnose and correct the issue. We use Pattern Traversal Flow Analysis (PTFA) to statically analyze code-derived formal models. Our analysis automatically computes counter-examples of definite protection properties and privilege protection losses. We computed privilege protections and their changes for 147 release pairs of WordPress. We computed counter-examples for a total of 14,116 privilege protection losses we found spread in 31 release pairs.We present the distribution of counter-examples' lengths, as well as their spread across function and file boundaries. Our results show that counter-examples are typically short and localized. The median example spans 88 statements, crosses a single function boundary, and is contained in the same file. The 90th centile example measures 174 statements and spans 3 function boundaries over 3 files. We believe that the privilege protection counter-examples' characteristics would be helpful to focus developers' attention for security reviews. These counter-examples are also a first step toward explanations.","PeriodicalId":6541,"journal":{"name":"2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER)","volume":"25 1","pages":"240-249"},"PeriodicalIF":0.0,"publicationDate":"2017-02-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"84271923","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8