• Title/Summary/Keyword: static code analysis

Search Result 374, Processing Time 0.029 seconds

Systematic and Comprehensive Comparisons of the MOIS Security Vulnerability Inspection Criteria and Open-Source Security Bug Detectors for Java Web Applications (행정안전부 소프트웨어 보안 취약점 진단기준과 Java 웹 어플리케이션 대상 오픈소스 보안 결함 검출기 검출대상의 총체적 비교)

  • Lee, Jaehun;Choe, Hansol;Hong, Shin
    • Journal of Software Engineering Society
    • /
    • v.28 no.1
    • /
    • pp.13-22
    • /
    • 2019
  • To enhance effective and efficient applications of automated security vulnerability checkers in highly competitive and fast-evolving IT industry, this paper studies a comprehensive set of security bug checkers in open-source static analysis frameworks and how they can be utilized for source code inspections according to the security vulnerability inspection guidelines by MOIS. This paper clarifies the relationship be tween all 42 inspection criteria in the MOIS guideline and total 323 security bug checkers in 4 popular open-source static analysis frameworks for Java web applications. Based on the result, this paper also discuss the current challenges and issues in the MOIS guideline, the comparison among the four security bug checker frameworks, and also the ideas to improve the security inspection methodologies using the MOIS guideline and open-source static security bug checkers.

A Dynamic Structural Analysis System for Propeller Blades (프로펠러 날개의 동적 구조해석 시스템 개발)

  • 노인식;이정렬;이현엽;이창섭
    • Journal of the Society of Naval Architects of Korea
    • /
    • v.41 no.2
    • /
    • pp.114-120
    • /
    • 2004
  • Propeller blades have complex airfoil section type geometry and the thickness is continuously varied to both its length and cord-wise direction. in the present research, the finite element analysis program PROSTEC (Propeller Stress Evaluation Code) is developed to calculate the structural responses of propeller blades in irregular ship wake field. To represent the curved and skewed geometry of propeller blades accurately, 20-node curved solid element using the quadratic shape function is adopted. Input data for the analysis including the geometry and pressure distribution of propeller blades can be generated automatically from the propeller design program. And to visualize the results of analysis on windows system conveniently, the post processor PROSTEC-POST is developed.

Estimation of Aircraft Stability Derivatives Using a Subsonic-supersonic Panel Method (아음속 초음속 패널법을 이용한 항공기 안정성 미계수 예측)

  • Gong, Hyo-Joon;Lee, Hyung-Ro;Kim, Beom-Soo;Lee, Seung-Soo
    • Journal of the Korean Society for Aeronautical & Space Sciences
    • /
    • v.40 no.5
    • /
    • pp.385-394
    • /
    • 2012
  • A computer program that can estimate static, dynamic stability and control derivatives using a subsonic-supersonic panel method is developed. The panel method uses subsonic-supersonic source and elementary horse shoe vortex distributions, and their strengths are determined by solving the boundary condition approximated with a thin body assumption. In addition, quasi-steady analysis on the body fixed coordinate system allows the estimation of damping coefficients of aircraft 3 axes. The code is validated by comparing the neutral point, roll and pitch damping of delta wings with published analysis results. Finally, the static, dynamic stability and control derivatives of F-18 are compared with experimental data as well as other numerical results to show the accuracy and the usefulness of the code.

An Study on the Measurement of Natural Period of Apartment for Seismic Design (내진설계를 위한 공동주택의 고유주기 측정에 관한 연구)

  • Kim, Dongbaek;Lee, Byeonghoon;Lee, Kwangjae;Lee, Induk
    • Journal of the Society of Disaster Information
    • /
    • v.11 no.4
    • /
    • pp.487-492
    • /
    • 2015
  • Recently, apartment designs are tend to be changed from the standard pattern by many causes and the beam-column structures are getting popular instead of wall structure system. Therefore, for the effective use of planed space the heights of apartment are tend to be higher and higher. According to Korea Building Code, earthquake resistance designs or seismic design for those high rise apartments must be more attentive and accurate, especially, dynamic periods of structures must be exactly measured, because those are very important for equivalent static analysis. The important subject of this study is to investigate the safety factors and seismic performance for natural period of high rise buildings by comparing the natural periods getting from ambient vibration method with those of Korea Building Code.

Development of Model for Seismic Qualification of Electronic Enclosure for Nuclear Power Plant (원자력발전소용 전자기기함을 위한 내진검증 해석 모델 개발연구)

  • Sur, Uk-Hwan
    • Transactions of the Korean Society of Mechanical Engineers A
    • /
    • v.35 no.1
    • /
    • pp.47-52
    • /
    • 2011
  • In this paper, we describe the development of a finite-element model for seismic qualification. This paper presents finite-element analysis model of the electronic enclosure to be used at Arkansas nuclear power plant, USA. The verified model predicts natural frequencies within 5% error for all major modes below 50 Hz. The finite element lumped mass approach and the finite element stiffness approach using the COSMOSM finite element code is applied for static, eigenvalue, and dynamic analyses of the mathematical model of this system. The FEM model indicates that the stress levels corresponding to the specified loading conditions are below the allowable stress levels that have been specified in the AISC Code. The findings conclude that the electronic enclosure will withstand the seismic levels stated in the reference documents.

Analysis on the discharge characteristics and spreading behavior of an ex-vessel core melt in the SMART

  • Sang Ho Kim;Jaehyun Ham;Byeonghee Lee;Sung Il Kim;Hwan Yeol Kim;Rae-Joon Park;Jaehoon Jung
    • Nuclear Engineering and Technology
    • /
    • v.54 no.12
    • /
    • pp.4551-4559
    • /
    • 2022
  • The aim of this research is to analyze the characteristics of a core melt discharged from the reactor vessel and the spreading behavior the core melt in the reactor cavity of the SMART. First, a severe accident sequence under conservative conditions is simulated by the MELCOR code to obtain the conditions for an analysis of the spreading behavior and coolability of the ex-vessel melt. Second, the spreading behavior and coolability of the ex-vessel melt are analyzed by the MELTSPREAD code. The level, temperature, and pressure of the water in the cavity as well as the temperature, mass, composition, and discharge velocity of the melt were utilized to construct the ex-vessel analysis. The melt spread only to part of the cavity, and that the height of the corium in a static state was less than 25 cm. The characteristics of a small modular reactor on the spreading behavior and coolability of melt were analyzed. In the SMART, the amount of melt discharged into the cavity is relatively small and the area of the cavity is sufficiently large when compared to a high-power pressurized water reactor. It was found that the coolability of an ex-vessel core melt can be sufficiently secured.

Transient stress analysis of tracked vehicle structures under recoil impact load (주퇴충격하중을 받는 궤도차량 구조물의 천이응력해석)

  • 이영신;김용환;김영완;김동수;성낙훈
    • Journal of the korean Society of Automotive Engineers
    • /
    • v.15 no.3
    • /
    • pp.111-119
    • /
    • 1993
  • In this study, the transient impact structural stress analysis of tracked vehicle structures under recoil impact load is investigated. ANSYS, ABAQUS Code are used for modelling and analytical procedures. The highest maximum Tresca stress occurs on race ring portion and its stress level is (.sigma.$_{T}$)$_{max}$ =20-40kgf/m $m^{2}$. The second highest stress occurs on upper plate of chassis and down plate of turret. The maximum stress level increases with loading direction and elevation angle. The results from liner static load analysis are very much different with impact analysis. Therefore, the practical solutions of structures under impact load can be obtained by only nonlinear transient impact analysis. The impact stress analysis of the steel vehicle structures is conducted. The maximum stress level is less than (.sigma.$_T/)$_{max}$m $m^{2}$. So, the design concept of steel structures can be adapted for new alternatives.s.s.s..s.

  • PDF

Reactor core analysis through the SP3-ACMFD approach Part II: Transient solution

  • Mirzaee, Morteza Khosravi;Zolfaghari, A.;Minuchehr, A.
    • Nuclear Engineering and Technology
    • /
    • v.52 no.2
    • /
    • pp.230-237
    • /
    • 2020
  • In this part, an implicit time dependent solution is presented for the Boltzmann transport equation discretized by the analytic coarse mesh finite difference method (ACMFD) over the spatial domain as well as the simplified P3 (SP3) for the angular variable. In the first part of this work we proposed a SP3-ACMFD approach to solve the static eigenvalue equations which provide the initial conditions for temp dependent equations. Having solved the 3D multi-group SP3-ACMFD static equations, an implicit approach is resorted to ensure stability of time steps. An exponential behavior is assumed in transverse integrated equations to establish a relationship between flux moments and currents. Also, analytic integration is benefited for the time-dependent solution of precursor concentration equations. Finally, a multi-channel one-phase thermal hydraulic model is coupled to the proposed methodology. Transient equations are then solved at each step using the GMRES technique. To show the sufficiency of proposed transient SP3-ACMFD approximation for a full core analysis, a comparison is made using transport peers as the reference. To further demonstrate superiority, results are compared with a 3D multi-group transient diffusion solver developed as a byproduct of this work. Outcomes confirm that the idea can be considered as an economic interim approach which is superior to the diffusion approximation, and comparable with transport in results.

Quality Management Model for Process Performance Level and Development Technology (프로세스 이행 수준과 개발 기술 품질 관리 모델)

  • Park, J.H.;Park, Y.S.;Jung, H.T.;Kim, S.H.
    • Electronics and Telecommunications Trends
    • /
    • v.32 no.6
    • /
    • pp.105-115
    • /
    • 2017
  • This paper describes a project - based quality management model that identifies development technologies and codes while at the same time verifying the ability to implement processes that are essential in R & D projects. In order to verify the process implemented in the R & D project implementation, there are review, checking points, and evaluating methods the process performance levels for five processes such as defining requirements which is the beginning stage of system development, testing process which is the completion stage of system development, and project management and peer review process for project management and support in the proposed project-based quality management model. For development technology and code validation, the model included the documented test cases for each requirement by the developer in the requirements definition stage, debugging and testing in the design and implementation stages, static analysis and open source licence verification procedure, and system environment. After applying the model in SW development R&D project for evaluating the process performance, and verifying the development technology and the code, the developers responded that the improvement in the development technique and the code, and upgrade of process performance level for project are more than 10%.

A design of the PSDG based semantic slicing model for software maintenance (소프트웨어의 유지보수를 위한 PSDG기반 의미분할모형의 설계)

  • Yeo, Ho-Young;Lee, Kee-O;Rhew, Sung-Yul
    • The Transactions of the Korea Information Processing Society
    • /
    • v.5 no.8
    • /
    • pp.2041-2049
    • /
    • 1998
  • This paper suggests a technique for program segmentation and maintenance using PSDG(Post-State Dependency Graph) that improves the quality of a software by identifying and detecting defects in already fixed source code. A program segmentation is performed by utilizing source code analysis which combines the measures of static, dynamic and semantic slicing when we need understandability of defect in programs for corrective maintanence. It provides users with a segmental principle to split a program by tracing state dependency of a source code with the graph, and clustering and highlighting, Through a modeling of the PSDG, elimination of ineffective program deadcode and generalization of related program segments arc possible, Additionally, it can be correlated with other design modeb as STD(State Transition Diagram), also be used as design documents.

  • PDF