首页 > 最新文献

Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange最新文献

英文 中文
Next-generation DPP with Sangam and Facetop
Pub Date : 2006-10-22 DOI: 10.1145/1188835.1188837
Kanyamas Navoraphan, E. Gehringer, James Culp, Karl Gyllstrom, D. Stotts
This paper describes a state-of-the-art environment for distributed Extreme Programming that results from combining the Sangam editor, developed at NCSU and the Facetop user interface, developed at UNC-Chapel Hill. Sangam facilitates distributed Extreme Programming by sending events back and forth between a driver and a navigator working under the Eclipse development environment. Concurrently, Facetop allows the distributed pair to recapture some of the face-to-face communications that are lost in no-video distributed pairing sessions. The integrated tool is a quantum leap forward for distributed Extreme Programming as well as distributed agile development.
本文描述了一个最先进的分布式极限编程环境,它结合了NCSU开发的Sangam编辑器和北卡罗来纳大学教堂山分校开发的Facetop用户界面。Sangam通过在Eclipse开发环境下的驱动程序和导航器之间来回发送事件来促进分布式极限编程。同时,Facetop允许分布式配对重新捕获一些在无视频分布式配对会话中丢失的面对面通信。集成工具是分布式极限编程和分布式敏捷开发的巨大飞跃。
{"title":"Next-generation DPP with Sangam and Facetop","authors":"Kanyamas Navoraphan, E. Gehringer, James Culp, Karl Gyllstrom, D. Stotts","doi":"10.1145/1188835.1188837","DOIUrl":"https://doi.org/10.1145/1188835.1188837","url":null,"abstract":"This paper describes a state-of-the-art environment for distributed Extreme Programming that results from combining the Sangam editor, developed at NCSU and the Facetop user interface, developed at UNC-Chapel Hill. Sangam facilitates distributed Extreme Programming by sending events back and forth between a driver and a navigator working under the Eclipse development environment. Concurrently, Facetop allows the distributed pair to recapture some of the face-to-face communications that are lost in no-video distributed pairing sessions. The integrated tool is a quantum leap forward for distributed Extreme Programming as well as distributed agile development.","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"9 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125500571","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 15
MolhadoRef: a refactoring-aware infrastructure for OO programs MolhadoRef:面向对象程序的重构感知基础设施
Pub Date : 2006-10-22 DOI: 10.1145/1188835.1188841
Danny Dig, K. Manzoor, T. Nguyen, Ralph E. Johnson
Refactoring tools allow programmers to change source code much quicker than before. However, the complexity of these changes cause versioning tools that operate at a file level to lose the history of components. This problem can be solved by semantic, operation-based SCM with persistent IDs. We propose that versioning tools be aware of the program entities and the refactoring operations. MolhadoRef uses these techniques to ensure that it never loses history.
重构工具允许程序员比以前更快地更改源代码。但是,这些更改的复杂性会导致在文件级别操作的版本控制工具丢失组件的历史记录。这个问题可以通过具有持久id的语义的、基于操作的SCM来解决。我们建议版本控制工具应该意识到程序实体和重构操作。MolhadoRef使用这些技术来确保它永远不会丢失历史。
{"title":"MolhadoRef: a refactoring-aware infrastructure for OO programs","authors":"Danny Dig, K. Manzoor, T. Nguyen, Ralph E. Johnson","doi":"10.1145/1188835.1188841","DOIUrl":"https://doi.org/10.1145/1188835.1188841","url":null,"abstract":"Refactoring tools allow programmers to change source code much quicker than before. However, the complexity of these changes cause versioning tools that operate at a file level to lose the history of components. This problem can be solved by semantic, operation-based SCM with persistent IDs. We propose that versioning tools be aware of the program entities and the refactoring operations. MolhadoRef uses these techniques to ensure that it never loses history.","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125605032","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
HAM: cross-cutting concerns in Eclipse HAM: Eclipse中的横切关注点
Pub Date : 2006-10-22 DOI: 10.1145/1188835.1188840
S. Breu, Thomas Zimmermann, Christian Lindig
As programs evolve, newly added functionality sometimes no longer aligns with the original design, ending up scattered across the software system. Aspect mining tries to identify such cross-cutting concerns in a program to support maintenance, or as a first step towards an aspect-oriented program. Previous approaches to aspect mining applied static or dynamic program analysis techniques to a single version of a system. We exploit all versions from a system's CVS history to mine aspect candidates; we are about to extend our research prototype to an Eclipse plug-in called HAM: when a single CVS commit adds calls to the same (small) set of methods in many unrelated locations, these method calls are likely to be cross-cutting. HAM employs formal concept analysis to identify aspect candidates. Analysing one commit operation at a time makes the approach scale to industrial-sized programs. In an evaluation we mined cross-cutting concerns from Eclipse 3.2M3 and found that up to 90% of the top-10 aspect candidates are truly cross-cutting concerns.
随着程序的发展,新添加的功能有时不再与原始设计保持一致,最终分散在整个软件系统中。方面挖掘试图在程序中识别这样的横切关注点,以支持维护,或者作为面向方面程序的第一步。以前的方面挖掘方法将静态或动态程序分析技术应用于系统的单个版本。我们利用系统CVS历史记录中的所有版本来挖掘候选方面;我们将把我们的研究原型扩展到一个名为HAM的Eclipse插件:当单个CVS提交在许多不相关的位置添加对相同(小)方法集的调用时,这些方法调用可能是横切的。HAM采用形式化概念分析来识别候选方面。一次分析一个提交操作使该方法适用于工业规模的程序。在一次评估中,我们从Eclipse 3.2M3中挖掘了横切关注点,发现前10个候选方面中高达90%是真正的横切关注点。
{"title":"HAM: cross-cutting concerns in Eclipse","authors":"S. Breu, Thomas Zimmermann, Christian Lindig","doi":"10.1145/1188835.1188840","DOIUrl":"https://doi.org/10.1145/1188835.1188840","url":null,"abstract":"As programs evolve, newly added functionality sometimes no longer aligns with the original design, ending up scattered across the software system. Aspect mining tries to identify such cross-cutting concerns in a program to support maintenance, or as a first step towards an aspect-oriented program. Previous approaches to aspect mining applied static or dynamic program analysis techniques to a single version of a system. We exploit all versions from a system's CVS history to mine aspect candidates; we are about to extend our research prototype to an Eclipse plug-in called HAM: when a single CVS commit adds calls to the same (small) set of methods in many unrelated locations, these method calls are likely to be cross-cutting. HAM employs formal concept analysis to identify aspect candidates. Analysing one commit operation at a time makes the approach scale to industrial-sized programs. In an evaluation we mined cross-cutting concerns from Eclipse 3.2M3 and found that up to 90% of the top-10 aspect candidates are truly cross-cutting concerns.","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121222352","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
FrUiT: IDE support for framework understanding 成果:IDE对框架理解的支持
Pub Date : 2006-10-22 DOI: 10.1145/1188835.1188847
Marcel Bruch, Thorsten Schäfer, M. Mezini
Frameworks provide means to reuse existing design and functionality, but first require developers to understand how to use them. Learning the correct usage of a framework can be difficult due to the large number of rules to obey and the complex collaborations between the classes. We propose the use of data mining techniques to extract reuse patterns from existing framework instantiations. Based on these patterns, suggestions about other relevant parts of the framework are presented to novice users in a context-dependent manner. We have built FrUiT, an Eclipse plug-in that implements this approach and present a first assessment by mining parts of the Eclipse framework.
框架提供了重用现有设计和功能的方法,但首先要求开发人员了解如何使用它们。由于需要遵守大量规则和类之间复杂的协作,学习框架的正确用法可能很困难。我们建议使用数据挖掘技术从现有框架实例中提取重用模式。基于这些模式,以与上下文相关的方式向新手用户提供有关框架其他相关部分的建议。我们已经构建了FrUiT,这是一个实现这种方法的Eclipse插件,并通过挖掘Eclipse框架的各个部分来提供第一次评估。
{"title":"FrUiT: IDE support for framework understanding","authors":"Marcel Bruch, Thorsten Schäfer, M. Mezini","doi":"10.1145/1188835.1188847","DOIUrl":"https://doi.org/10.1145/1188835.1188847","url":null,"abstract":"Frameworks provide means to reuse existing design and functionality, but first require developers to understand how to use them. Learning the correct usage of a framework can be difficult due to the large number of rules to obey and the complex collaborations between the classes. We propose the use of data mining techniques to extract reuse patterns from existing framework instantiations. Based on these patterns, suggestions about other relevant parts of the framework are presented to novice users in a context-dependent manner. We have built FrUiT, an Eclipse plug-in that implements this approach and present a first assessment by mining parts of the Eclipse framework.","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"33 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129542071","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 57
JExercise: a specification-based and test-driven exercise support plugin for Eclipse JExercise:一个基于规范和测试驱动的Eclipse练习支持插件
Pub Date : 2006-10-22 DOI: 10.1145/1188835.1188850
Hallvard Trætteberg, Trond Aalberg
Programming exercises are an important part of an introductory course in programming. To improve the focus on encapsulation, requirements-based testing and give better feedback given to the students during their work, we have created an Eclipse-based plugin called JExercise. Based on a model of an exercise, it presents the structure of requirements to the student and allows her to test the code by running accompanying JUnit tests.
编程练习是编程入门课程的重要组成部分。为了改进对封装、基于需求的测试的关注,并在学生的工作过程中给他们提供更好的反馈,我们创建了一个基于eclipse的插件,名为JExercise。基于一个练习的模型,它向学生展示了需求的结构,并允许她通过运行附带的JUnit测试来测试代码。
{"title":"JExercise: a specification-based and test-driven exercise support plugin for Eclipse","authors":"Hallvard Trætteberg, Trond Aalberg","doi":"10.1145/1188835.1188850","DOIUrl":"https://doi.org/10.1145/1188835.1188850","url":null,"abstract":"Programming exercises are an important part of an introductory course in programming. To improve the focus on encapsulation, requirements-based testing and give better feedback given to the students during their work, we have created an Eclipse-based plugin called JExercise. Based on a model of an exercise, it presents the structure of requirements to the student and allows her to test the code by running accompanying JUnit tests.","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124365429","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 16
Fine-grained processing of CVS archives with APFEL 使用APFEL对CVS存档进行细粒度处理
Pub Date : 2006-10-22 DOI: 10.1145/1188835.1188839
Thomas Zimmermann
In this paper, we present the APFEL plug-in that collects fine-grained changes from version archives in a database. APFEL is built upon the Eclipse infrastructure for CVS and Java. In order to describe changes, APFEL uses tokens such as method calls, exceptions, and variable usages. We demonstrate the usefulness of APFEL's database with several case studies.
在本文中,我们介绍了APFEL插件,它从数据库中的版本存档中收集细粒度的更改。APFEL构建在CVS和Java的Eclipse基础设施之上。为了描述变化,APFEL使用诸如方法调用、异常和变量用法之类的标记。我们通过几个案例研究证明了APFEL数据库的有用性。
{"title":"Fine-grained processing of CVS archives with APFEL","authors":"Thomas Zimmermann","doi":"10.1145/1188835.1188839","DOIUrl":"https://doi.org/10.1145/1188835.1188839","url":null,"abstract":"In this paper, we present the APFEL plug-in that collects fine-grained changes from version archives in a database. APFEL is built upon the Eclipse infrastructure for CVS and Java. In order to describe changes, APFEL uses tokens such as method calls, exceptions, and variable usages. We demonstrate the usefulness of APFEL's database with several case studies.","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"7 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130763475","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 37
Guidance through active concerns 通过积极关注进行指导
Pub Date : 2006-10-22 DOI: 10.1145/1188835.1188848
Barthélémy Dagenais, H. Ossher
Producing usable documentation has always been a tedious task, and even communicating important knowledge about a system among collaborators is difficult. This paper describes an approach to creating documentation in the form of guides, which encapsulate passive information about important tasks along with active steps to be followed. The approach is concern-based, and introduces active steps into traditionally passive concerns. A developer can begin by creating a concern that identifies elements of importance in the context of a task, which, we believe, is easier and more natural than trying to formulate a process up front. S/he can then easily create a guide to the task based on this concern, and export it. Other developers can follow the guide, and, as they do so, their results are recorded as examples for future reference. As an early step towards validation, we created a guide for the complex task of creating an Eclipse editor.
生成可用的文档一直是一项乏味的任务,甚至在协作者之间交流关于系统的重要知识也是困难的。本文描述了一种以指南的形式创建文档的方法,它封装了关于重要任务的被动信息以及要遵循的主动步骤。该方法是基于关注的,并在传统的被动关注中引入了主动步骤。开发人员可以从创建一个关注开始,该关注识别任务上下文中的重要元素,我们相信,这比尝试预先制定一个过程更容易和更自然。然后,他/她可以基于这个关注点轻松地创建任务指南,并将其导出。其他开发人员可以遵循指南,并且,当他们这样做时,他们的结果将被记录为示例,以供将来参考。作为验证的早期步骤,我们为创建Eclipse编辑器的复杂任务创建了一个指南。
{"title":"Guidance through active concerns","authors":"Barthélémy Dagenais, H. Ossher","doi":"10.1145/1188835.1188848","DOIUrl":"https://doi.org/10.1145/1188835.1188848","url":null,"abstract":"Producing usable documentation has always been a tedious task, and even communicating important knowledge about a system among collaborators is difficult. This paper describes an approach to creating documentation in the form of guides, which encapsulate passive information about important tasks along with active steps to be followed. The approach is concern-based, and introduces active steps into traditionally passive concerns. A developer can begin by creating a concern that identifies elements of importance in the context of a task, which, we believe, is easier and more natural than trying to formulate a process up front. S/he can then easily create a guide to the task based on this concern, and export it. Other developers can follow the guide, and, as they do so, their results are recorded as examples for future reference. As an early step towards validation, we created a guide for the complex task of creating an Eclipse editor.","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"55 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127068585","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 7
A toolsuite for the verification of real-time systems in Eclipse 用于验证Eclipse中的实时系统的工具套件
Pub Date : 2006-10-22 DOI: 10.1145/1188835.1188843
Lucía Cavatorta, Guido de Caso, A. Ferrari, V. Braberman, D. Garbervetsky, N. Kicillof, F. Schapachnik, A. Olivero
In this work we present an Eclipse plug-in for the VINTIME (Verifier of INtegrated TImed ModEls) suite of tools that combines high-level expressive power, unassisted property-preserving model reduction and distributed model checking to describe and verify complex real-time system designs and their properties.
在这项工作中,我们为VINTIME(集成时间模型验证器)工具套件提供了一个Eclipse插件,它结合了高级表达能力、无辅助的属性保留模型简化和分布式模型检查来描述和验证复杂的实时系统设计及其属性。
{"title":"A toolsuite for the verification of real-time systems in Eclipse","authors":"Lucía Cavatorta, Guido de Caso, A. Ferrari, V. Braberman, D. Garbervetsky, N. Kicillof, F. Schapachnik, A. Olivero","doi":"10.1145/1188835.1188843","DOIUrl":"https://doi.org/10.1145/1188835.1188843","url":null,"abstract":"In this work we present an Eclipse plug-in for the VINTIME (Verifier of INtegrated TImed ModEls) suite of tools that combines high-level expressive power, unassisted property-preserving model reduction and distributed model checking to describe and verify complex real-time system designs and their properties.","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115386220","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange 2006年eclipse技术交流OOPSLA研讨会论文集
M. Burke, A. Orso, M. Robillard
{"title":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","authors":"M. Burke, A. Orso, M. Robillard","doi":"10.1145/1188835","DOIUrl":"https://doi.org/10.1145/1188835","url":null,"abstract":"","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"59 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122792204","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
SSVChecker: unifying static security vulnerability detection tools in an Eclipse plug-in SSVChecker:统一Eclipse插件中的静态安全漏洞检测工具
Pub Date : 2006-10-22 DOI: 10.1145/1188835.1188842
J. Dehlinger, Qian Feng, Lan Hu
The increasing complexity of secure software applications has given rise to static analysis security tools to alert developers to potential security flaws within source code. However, these static security vulnerability detection tools tend to be difficult to use and are not integrated with common software development environments. The contribution of this work is SSVChecker, an Eclipse plug-in that unifies existing static security vulnerability detection tools into a powerful, intuitive tool. We make three fundamental claims for SSVChecker. First, it contains functionality not found in other static security vulnerability detection tools (e.g., union and intersection of multiple tool results). Second, the tool can adapt to the results of user-performed analysis to prevent repeatedly reporting user-dismissed security vulnerabilities. Lastly, it operates on a user-friendly, generic framework allowing for the inclusion of future static security vulnerability detection tools. To illustrate these claims, we use SSVChecker on a security-sensitive networking package. Results show the benefits of the tool in identifying potential security vulnerabilities.
安全软件应用程序日益增加的复杂性导致了静态分析安全工具的出现,以提醒开发人员注意源代码中潜在的安全缺陷。然而,这些静态安全漏洞检测工具往往难以使用,并且不能与常见的软件开发环境集成。这项工作的贡献是SSVChecker,这是一个Eclipse插件,它将现有的静态安全漏洞检测工具统一为一个强大、直观的工具。我们对SSVChecker提出三个基本要求。首先,它包含了其他静态安全漏洞检测工具所没有的功能(例如,多个工具结果的并集和交集)。其次,该工具可以适应用户执行的分析结果,以防止重复报告用户忽略的安全漏洞。最后,它在一个用户友好的通用框架上运行,允许包含未来的静态安全漏洞检测工具。为了说明这些说法,我们在一个安全敏感的网络包上使用SSVChecker。结果显示了该工具在识别潜在安全漏洞方面的优势。
{"title":"SSVChecker: unifying static security vulnerability detection tools in an Eclipse plug-in","authors":"J. Dehlinger, Qian Feng, Lan Hu","doi":"10.1145/1188835.1188842","DOIUrl":"https://doi.org/10.1145/1188835.1188842","url":null,"abstract":"The increasing complexity of secure software applications has given rise to static analysis security tools to alert developers to potential security flaws within source code. However, these static security vulnerability detection tools tend to be difficult to use and are not integrated with common software development environments. The contribution of this work is SSVChecker, an Eclipse plug-in that unifies existing static security vulnerability detection tools into a powerful, intuitive tool. We make three fundamental claims for SSVChecker. First, it contains functionality not found in other static security vulnerability detection tools (e.g., union and intersection of multiple tool results). Second, the tool can adapt to the results of user-performed analysis to prevent repeatedly reporting user-dismissed security vulnerabilities. Lastly, it operates on a user-friendly, generic framework allowing for the inclusion of future static security vulnerability detection tools. To illustrate these claims, we use SSVChecker on a security-sensitive networking package. Results show the benefits of the tool in identifying potential security vulnerabilities.","PeriodicalId":297590,"journal":{"name":"Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange","volume":"38 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2006-10-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124075593","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 9
期刊
Proceedings of the 2006 OOPSLA workshop on eclipse technology eXchange
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1