• Title/Summary/Keyword: static code analysis

Search Result 372, Processing Time 0.952 seconds

Comparison of Path Exploration and Model Checking Techniques for Checking Automotive API Call Safety (차량전장용 소프트웨어의 API 제약사항 위배여부 탐지를 위한 실행경로 탐색방법과 모델검증 방법의 비교)

  • Kim, Dongwoo;Choi, Yunja
    • KIPS Transactions on Software and Data Engineering
    • /
    • v.5 no.12
    • /
    • pp.615-622
    • /
    • 2016
  • Automotive control software can be a source of critical safety issues when developers do not comply system constraints. However, a violation is difficult to identify in complicated source code if not supported by an automated verification tool. This paper introduces two possible approaches that check whether an automotive control software complies API call constraints to compare their performance and effectiveness. One method statically analyzes the source code and explores all possible execution paths, and the other utilizes a model checker to monitor constraint violations for a given set of constraint automata. We have implemented both approaches and performed a series of experiments showing that the approach with model-checking finds constraint violations more accurately and scales better.

A Software Engineering Process for Safety-critical Software Application (Safety-critical 소프트웨어 적용을 위한 소프트웨어 개발 절차)

  • Kang, Byung-Heon;Kim, Hang-Bae;Chang, Hoon-Seon;Jeon, Jong-Sun;Park, Suk-Joon
    • Nuclear Engineering and Technology
    • /
    • v.27 no.1
    • /
    • pp.84-95
    • /
    • 1995
  • Application of computer software to safety-critical systems is on the increase. To be successful, the software must be designed and constructed to meet the functional and performance requirements of the system. For safety reason, the software must be demonstrated not only to meet these requirements, but also to operate safely as a component within the system. For longer-term cost consideration, the software must be designed and structured to ease future maintenance and modifications. This paper present a software engineering process for the production of safety-critical software for a nuclear power plant The presentation is expository in nature of a viable high quality safety-critical software development. It is based on the ideas of a rational design process and on the experience of the adaptation of such process in the production of the safety-critical software for the Shutdown System Number Two of Wolsong 2, 3 & 4 nuclear power generation plants. This process is significantly different from a conventional process in terms of rigorous software development phases and software design techniques. The process covers documentation, design, verification and testing using mathematically precise notations and highly reviewable tabular format to specify software requirements and software design. These specifications allow rigorous, stepwise verification of software design against software requirements, and code against software design using static analysis. The software engineering process described in this paper applies the principle of information-hiding decomposition in software design using a modular design technique so that when a change is' required or an error is detected, the affected scope can be readily and confidently located. It also facilitates a sense of high degree of confidence in the ‘correctness’ of the software production, and provides a relatively simple and straightforward code implementation effort.

  • PDF

A Plagiarism Detection Technique for Source Codes Considering Data Structures (데이터 구조를 고려한 소스코드 표절 검사 기법)

  • Lee, Kihwa;Kim, Yeoneo;Woo, Gyun
    • KIPS Transactions on Computer and Communication Systems
    • /
    • v.3 no.6
    • /
    • pp.189-196
    • /
    • 2014
  • Though the plagiarism is illegal and should be avoided, it still occurs frequently. Particularly, the plagiarism of source codes is more frequently committed than others since it is much easier to copy them because of their digital nature. To prevent code plagiarism, there have been reported a variety of studies. However, previous studies for plagiarism detection techniques on source codes do not consider the data structures although a source code consists both of data structures and algorithms. In this paper, a plagiarism detection technique for source codes considering data structures is proposed. Specifically, the data structures of two source codes are represented as sets of trees and compared with each other using Hungarian Method. To show the usefulness of this technique, an experiment has been performed on 126 source codes submitted as homework results in an object-oriented programming course. When both the data structures and the algorithms of the source codes are considered, the precision and the F-measure score are improved 22.6% and 19.3%, respectively, than those of the case where only the algorithms are considered.

Estimation of Stiffness Limit for Railway Bridge Vibration Serviceability (진동사용성을 고려한 철도교량구조물의 강성한계 분석)

  • Jeon, Bub-Gyu;Kim, Nam-Sik;Kim, Sung-Il
    • Journal of the Korean Society for Railway
    • /
    • v.11 no.5
    • /
    • pp.489-498
    • /
    • 2008
  • In general, deflection limit criteria of bridge design specifications have been considered based on static serviceability and structural stability. Dynamic serviceability induced from bridge vibration actually has not been included in the criteria. Thus, it is necessary for deflection limit to be considered in order to check dynamic service- ability on bridge vibration. In this study, The allowable displacement of Korea Railway Bridge Design Specifications is compared to the frequency domain comfort limit and analyzed france code and japanese code. Korea Railway Bridge Design Specifications is regulated based on the train speed. Such is because the vibration time duration is partly considered. but this criteria is not satisfied with comfort limit. and, it is estimated to be capable to provide deflection limit considering dynamic serviceability. In order to evaluate the dynamic serviceability of various types of railway bridges in current public were selected and their dynamic signals were measured. and the result of the bridge-train interaction analysis according to the changes in bridge stiffness was compared to the comfort limit to suggest the stiff-ness limit to the dynamic serviceability, which should conveniently be applied at the field.

Investigation of shear effects on the capacity and demand estimation of RC buildings

  • Palanci, Mehmet;Kalkan, Ali;Sene, Sevket Murat
    • Structural Engineering and Mechanics
    • /
    • v.60 no.6
    • /
    • pp.1021-1038
    • /
    • 2016
  • Considerable part of reinforced concrete building has suffered from destructive earthquakes in Turkey. This situation makes necessary to determine nonlinear behavior and seismic performance of existing RC buildings. Inelastic response of buildings to static and dynamic actions should be determined by considering both flexural plastic hinges and brittle shear hinges. However, shear capacities of members are generally neglected due to time saving issues and convergence problems and only flexural response of buildings are considered in performance assessment studies. On the other hand, recent earthquakes showed that the performance of older buildings is mostly controlled by shear capacities of members rather than flexure. Demand estimation is as important as capacity estimation for the reliable performance prediction in existing RC buildings. Demand estimation methods based on strength reduction factor (R), ductility (${\mu}$), and period (T) parameters ($R-{\mu}-T$) and damping dependent demand formulations are widely discussed and studied by various researchers. Adopted form of $R-{\mu}-T$ based demand estimation method presented in Eurocode 8 and Turkish Earthquake Code-2007 and damping based Capacity Spectrum Method presented in ATC-40 document are the typical examples of these two different approaches. In this study, eight different existing RC buildings, constructed before and after Turkish Earthquake Code-1998, are selected. Capacity curves of selected buildings are obtained with and without considering the brittle shear capacities of members. Seismic drift demands occurred in buildings are determined by using both $R-{\mu}-T$ and damping based estimation methods. Results have shown that not only capacity estimation methods but also demand estimation approaches affect the performance of buildings notably. It is concluded that including or excluding the shear capacity of members in nonlinear modeling of existing buildings significantly affects the strength and deformation capacities and hence the performance of buildings.

Splice Performance Evaluation of Fastening Coupler According to the Slope Length of Internal Fasteners (조임쇠 경사길이에 따른 체결식 커플러의 이음성능 평가)

  • Jung, Hyun-Suk;Choi, Chang-Sik
    • Journal of the Korea institute for structural maintenance and inspection
    • /
    • v.26 no.4
    • /
    • pp.11-19
    • /
    • 2022
  • In this study, in order to improve the splice performance of mechanical couplers, two new mechanical couplers with different connection modes were developed with rebar(SD400). The stress analysis of mechanical couplers with two different connection modes was carried out. Uniaxial tensile tests were carried out with type of steel, connection mode and the slope length of internal fastener as variables to analyze the influence on the maximum tensile strength. Building upon this previous work, the specimens that met the code in uniaxial tensile test were fabricated and static loading test and cyclic loading test were performed on the basis of Korean code(KS D 0249). The results of this research are as follows; (1) The tensile strength of steel and the slope length of internal fasteners have a certain influence on the maximum tensile strength. (2) The connection mode has some influence on the stiffness, slip and stiffness reduction rate of the connecting rebars. The results verify the feasibility of the proposed enhanced mechanical coupler in the field.

An Enhancement Scheme of Dynamic Analysis for Evasive Android Malware (분석 회피 기능을 갖는 안드로이드 악성코드 동적 분석 기능 향상 기법)

  • Ahn, Jinung;Yoon, Hongsun;Jung, Souhwan
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.29 no.3
    • /
    • pp.519-529
    • /
    • 2019
  • Nowadays, intelligent Android malware applies anti-analysis techniques to hide malicious behaviors and make it difficult for anti-virus vendors to detect its presence. Malware can use background components to hide harmful operations, use activity-alias to get around with automation script, or wipe the logcat to avoid forensics. During our study, several static analysis tools can not extract these hidden components like main activity, and dynamic analysis tools also have problem with code coverage due to partial execution of android malware. In this paper, we design and implement a system to analyze intelligent malware that uses anti-analysis techniques to improve detection rate of evasive malware. It extracts the hidden components of malware, runs background components like service, and generates all the intent events defined in the app. We also implemented a real-time logging system that uses modified logcat to block deleting logs from malware. As a result, we improve detection rate from 70.9% to 89.6% comparing other container based dynamic analysis platform with proposed system.

An Effective Method for Comparing Control Flow Graphs through Edge Extension (에지 확장을 통한 제어 흐름 그래프의 효과적인 비교 방법)

  • Lim, Hyun-Il
    • KIPS Transactions on Computer and Communication Systems
    • /
    • v.2 no.8
    • /
    • pp.317-326
    • /
    • 2013
  • In this paper, we present an effective method for comparing control flow graphs which represent static structures of binary programs. To compare control flow graphs, we measure similarities by comparing instructions and syntactic information contained in basic blocks. In addition, we also consider similarities of edges, which represent control flows between basic blocks, by edge extension. Based on the comparison results of basic blocks and edges, we match most similar basic blocks in two control flow graphs, and then calculate the similarity between control flow graphs. We evaluate the proposed edge extension method in real world Java programs with respect to structural similarities of their control flow graphs. To compare the performance of the proposed method, we also performed experiments with a previous structural comparison for control flow graphs. From the experimental results, the proposed method is evaluated to have enough distinction ability between control flow graphs which have different structural characteristics. Although the method takes more time than previous method, it is evaluated to be more resilient than previous method in comparing control flow graphs which have similar structural characteristics. Control flow graph can be effectively used in program analysis and understanding, and the proposed method is expected to be applied to various areas, such as code optimization, detection of similar code, and detection of code plagiarism.

One-way Coupled Response Analysis between Floating Wind-Wave Hybrid Platform and Wave Energy Converters (부유식 풍력-파력발전 플랫폼과 탑재된 파력발전기와의 단방향 연성 운동 해석)

  • Lee, Hyebin;Bae, Yoon Hyeok;Cho, Il-Hyoung
    • Journal of Ocean Engineering and Technology
    • /
    • v.30 no.2
    • /
    • pp.84-90
    • /
    • 2016
  • In this study, a six degree-of-freedom motion analysis of a wind-wave hybrid platform equipped with numerous wave energy converters (WECs) was carried out. To examine the effect of the WECs on the platform, an analysis of one-way coupling was carried out, which only considered the power take-off (PTO) damping of the static WECs on the platform. The equation of motion of a floating platform with mooring lines in the time domain was established, and the responses of the one-way coupled platform were then compared with the case of a platform without any coupling effects from the WECs. The hydrodynamic coefficients and wave exciting forces were obtained from the 3D diffraction/radiation pre-processor code WAMIT based on the boundary element method. Then, an analysis of the dynamic responses of the floating platform with or without the WEC effect in the time domain was carried out. All of the dynamics of a floating platform with multiple wind turbines were obtained by coupling FAST and CHARM3D in the time domain, which was further extended to include additional coupled dynamics for multiple turbines. The analysis showed that the PTO damping effect on platform motions was negligible, but coupled effects between multiple WECs and the platform may differentiate the heave, roll, and pitch platform motions from the one without any effects induced by WECs.

Proposition of Response Modification Factor of Low-rise Steel Intermediate Moment Frame in Korea using FEMA P695 (FEMA P695를 이용한 국내 저층 철골 중간모멘트골조의 반응수정계수 제안)

  • Han, A Rum;Kim, Taewan;Yu, Eunjong
    • Journal of the Earthquake Engineering Society of Korea
    • /
    • v.18 no.1
    • /
    • pp.37-43
    • /
    • 2014
  • In current seismic design code, steel moment frames are classified into ordinary, intermediate, and special moment frames. In the case of special moment frames which have large R-factor, economic design is possible by reducing the design lateral force. However, there is difficulty for practical application due to constraints such as strong column-weak beam requirement. This study evaluated if steel intermediate moment frame could maintain enough seismic capacity when the R-factor is increased from 4.5 to 6. As for the analytical models, steel moment frames of 3 and 5 stories were categorized into four performance groups according to seismic design category. Seismic performances of the frames were evaluated through the procedure based on FEMA P695. FEMA P695 utilizes nonlinear static analysis(pushover analysis) and nonlinear dynamic analysis(incremental dynamic analysis, IDA). In order to reflect the characteristics of Korean steel moment frames on the analytical model, the beam-column connection was modeled as weak panel zone where the collapse of panel zone was indirectly considered by checking its ultimate rotational angle after an analysis is done. The analysis result showed that the performance criteria required by FEMA P695 was satisfied when R-factor increased in all the soil conditions except $S_E$.