• Title/Summary/Keyword: static code analysis

Search Result 372, Processing Time 0.024 seconds

Analysis on Software Static Testing Results of Railway Signaling System (열차제어시스템 소프트웨어 정적 테스팅 적용시험 결과 분석)

  • Hwang, Jong-Gyu;Jo, Hyun-Jeong;Jeong, Rak-Gyo
    • The Transactions of the Korean Institute of Electrical Engineers P
    • /
    • v.62 no.1
    • /
    • pp.30-35
    • /
    • 2013
  • Many function of railway signalling system which is in charge of most core function in a railway system are being operated by the software according to the development of computer technology. Accordingly, the source code testing to verify the safety of the railway signalling system software becomes to be more important, and related international standards highly recommend verifications on the source code also. For this reason, several related studies on vital source code verification were executed from several years ago in Korea. This paper performed tests through the application to railway signalling system being applied to the existing actual domestic railway sites through automated testing tools for coding rules of signalling system software and another signaling system software under development in Korea recently, and analyzed their results.

Study on High-speed Cyber Penetration Attack Analysis Technology based on Static Feature Base Applicable to Endpoints (Endpoint에 적용 가능한 정적 feature 기반 고속의 사이버 침투공격 분석기술 연구)

  • Hwang, Jun-ho;Hwang, Seon-bin;Kim, Su-jeong;Lee, Tae-jin
    • Journal of Internet Computing and Services
    • /
    • v.19 no.5
    • /
    • pp.21-31
    • /
    • 2018
  • Cyber penetration attacks can not only damage cyber space but can attack entire infrastructure such as electricity, gas, water, and nuclear power, which can cause enormous damage to the lives of the people. Also, cyber space has already been defined as the fifth battlefield, and strategic responses are very important. Most of recent cyber attacks are caused by malicious code, and since the number is more than 1.6 million per day, automated analysis technology to cope with a large amount of malicious code is very important. However, it is difficult to deal with malicious code encryption, obfuscation and packing, and the dynamic analysis technique is not limited to the performance requirements of dynamic analysis but also to the virtual There is a limit in coping with environment avoiding technology. In this paper, we propose a machine learning based malicious code analysis technique which improve the weakness of the detection performance of existing analysis technology while maintaining the light and high-speed analysis performance applicable to commercial endpoints. The results of this study show that 99.13% accuracy, 99.26% precision and 99.09% recall analysis performance of 71,000 normal file and malicious code in commercial environment and analysis time in PC environment can be analyzed more than 5 per second, and it can be operated independently in the endpoint environment and it is considered that it works in complementary form in operation in conjunction with existing antivirus technology and static and dynamic analysis technology. It is also expected to be used as a core element of EDR technology and malware variant analysis.

A Static Analysis Technique for Android Apps Written with Xamarin (자마린으로 개발된 안드로이드 앱의 정적 분석 연구)

  • Lim, Kyeong-hwan;Kim, Gyu-sik;Shim, Jae-woo;Cho, Seong-je
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.28 no.3
    • /
    • pp.643-653
    • /
    • 2018
  • Xamarin is a representative cross-platform development framework that allows developers to write mobile apps in C# for multiple mobile platforms, such as Android, iOS, or Windows Phone. Using Xamarin, mobile app developers can reuse existing C# code and share significant code across multiple platforms, reducing development time and maintenance costs. Meanwhile, malware authors can also use Xamarin to spread malicious apps on more platforms, minimizing the time and cost of malicious app creation. In order to cope with this problem, it is necessary to analyze and detect malware written with Xamarin. However, little studies have been conducted on static analysis methods of the apps written in Xamarin. In this paper, we examine the structure of Android apps written with Xamarin and propose a static analysis technique for the apps. We also demonstrate how to statically reverse-engineer apps that have been transformed using code obfuscation. Because the Android apps written with Xamarin consists of Java bytecode, C# based DLL libraries, and C/C++ based native libraries, we have studied static reverse engineering techniques for these different types of code.

Comparative Study of P-T Limit Curves between 1998 ASME and 2017 ASME Code Applied to Typical OPR1000 Reactors

  • Maragia, Joswhite Ondabu;Namgung, Ihn
    • Transactions of the Korean Society of Pressure Vessels and Piping
    • /
    • v.15 no.2
    • /
    • pp.1-8
    • /
    • 2019
  • The integrity of the Reactor Pressure Vessel (RPV) is affected by the neutrons bombarding the vessel wall leading to embrittlement. This irradiation-induced embrittlement leads to reduction in the fracture toughness of RPV materials. This paper presents a comparative study of typical Optimized Power Reactor (OPR)1000 reactor pressure-temperature (P-T) limit curves using the pre-2006 American Society of Mechanical Engineers (ASME) editions used in the power plant and the current ASME edition of 2010. The current ASME Code utilizes critical reference stress intensity factor based on the lower bound of static, while the Pre-2006 ASME editions are based the critical reference stress intensity factor based on the lower bound of static, dynamic and crack arrest. Model-Based Systems Engineering approach was used to evaluate ASME Code Section XI Appendix G for generating the P-T limit curves. The results obtained from this analysis indicate decrease in conservatism in P-T limit curves constructed using the current 2017 ASME code, which can potentially increase operational flexibility and plant safety. Hence it is recommended to use ASME code edition after 2006 be used in all operating nuclear power plants (NPPs) to establish P-T limit curve.

Structural identification and seismic performance of brick chimneys, Tokoname, Japan

  • Aoki, T.;Sabia, D.
    • Structural Engineering and Mechanics
    • /
    • v.21 no.5
    • /
    • pp.553-570
    • /
    • 2005
  • Dynamic and static analyses of existing structures are very important to obtain reliable information relating to actual structural properties. For this purpose a series of material test, dynamic test and static collapse test of the existing two brick chimneys, in Tokoname, are carried out. From the material tests, Young's modulus and compressive strength of the brick used for these chimneys are estimated to be 3200 MPa and 7.5 MPa, respectively. The results of static collapse test of the existing two brick chimneys are discussed in this paper and composed with the results from FEA (Finite Element analysis). From the results of dynamic tests, the fundamental frequencies of Howa and Iwata brick chimneys are estimated to be about 2.69 Hz and 2.93 Hz, respectively. Their natural modes are identified by ARMAV (Autoregressive Moving Average Vectors) model. On the basis of the static and dynamic experimental tests, a numerical model has been prepared. According to the European code (Eurocode n. 8: "Design of structures for earthquake resistance") non-linear static (Pushover) analysis of the two chimneys is carried out and they seem to be vulnerable to earthquakes with 0.25 to 0.35 g.

An evaluation of the seismic response of symmetric steel space buildings

  • Yon, Burak
    • Steel and Composite Structures
    • /
    • v.20 no.2
    • /
    • pp.399-412
    • /
    • 2016
  • This paper evaluates the seismic response of three dimensional steel space buildings using the spread plastic hinge approach. A numerical study was carried out in which a sample steel space building was selected for pushover analysis and incremental nonlinear dynamic time history analysis. For the nonlinear analysis, three earthquake acceleration records were selected to ensure compatibility with the design spectrum defined in the Turkish Earthquake Code. The interstorey drift, capacity curve, maximum responses and dynamic pushover curves of the building were obtained. The analysis results were compared and good correlation was obtained between the idealized dynamic analyses envelopes with and static pushover curves for the selected building. As a result to more accurately account response of steel buildings, dynamic pushover envelopes can be obtained and compared with static pushover curve of the building.

A Study on Software Static Analysis Method on IEC 62279 (IEC 62279 규격의 소프트웨어 정적분석에 관한 연구)

  • Jin, Zhe-Huan;Li, Chang-Long;Lee, Jae-Ho;Kim, Jae-Sik;Lee, Key-Seo
    • The Journal of the Korea institute of electronic communication sciences
    • /
    • v.10 no.4
    • /
    • pp.513-519
    • /
    • 2015
  • Static analysis is one of the software source code analysis tools. 9 static analysis methods of three groups are recommended by international electro-technical commission about software safety related standard in IEC 62279. In this paper we choose the proper static analysis method from IEC 62279 about the train wayside communication system, Shorten the time of railway signalling software development using LDRA tools. And it wil be useful to improve the effective development of the safety-related software.

Study on Eigenvalue Analysis for a Towed Cable - Free Boundary at the Bottom End (예인되는 케이블의 고유치 해석에 관한 연구 - 하부 끝단 자유 경계조건)

  • Jung, Dong-Ho;Kim, Hyeon-Ju;Moon, Deok-Soo;Lee, Seung-Won
    • Journal of Ocean Engineering and Technology
    • /
    • v.23 no.1
    • /
    • pp.74-80
    • /
    • 2009
  • In this study, the static and modal analyses to find the characteristic of eigenvalues for a towed cable were with a free boundary condition at the bottom end carried out with numerical study. The resulting numerical code with finite element method was used to study sample problems for a cable with towing speeds. After tracing the equilibrium state with a towing speed through the static analysis, modal analysis on the basis of static results was performed. The static top tension for a critical towing speed is nearly 50 percent of what it was for a free hanging pipe. From static analyses, it is found that towing speed has a noticeable effect on top tension of a towed pipe. At a high towing speed, differences between the first and second periods become larger. Compared to the fundamental period for a free hanging pipe, that for a towed pipe with a critical towing speed is approximately 1.4 times larger. This result is very important point in that the lock in condition and tension of the towed cable system with top excitation can be predicted. The corrected close form solution to solve natural periods for a towed cable was presented in this study. The code is validated by comparison of the results of theoretical and numerical studies. Two results were in very good agreement. This study can contribute to predicting the lock-in condition and tension for a towed cable or pipe with top excitation.

The Analysis of Draw-bead Process by Using Static-explicit Finite Element Method (정적 외연적 유한요소법을 이용한 비드공정해석)

  • Jung, Dong-Won
    • Proceedings of the KSME Conference
    • /
    • 2001.06c
    • /
    • pp.604-609
    • /
    • 2001
  • In the sheet metal forming process, the drawbead is used to control the flow of material during the forming process. The drawbead provides proper restraining force to the material and prevents defects such as wrinkling or breakage. For these reasons, many studies for designing the effective drawbead have been conducted. For the analysis, the numerical method called the static-explicit finite element method was used. The finite element analysis code for this method has been developed and applied to the drawbead process problems. In result, convergence problem and computation time due to large non-linearity in the existing numerical analysis methods were no longer a critical problem. Futhermore, this approach could treat the contact friction problem easily by applying very small time intervals. It is expected that various results from the numerical analysis will give very useful information for the design of tools in sheet metal forming process.

  • PDF

Static Stiffness Characteristics of Main Spindle Interface using Finite Element Method (유한요소법을 이용한 주축 인터페이스부의 정강성 특성)

  • Hwang, Young-Kug;Chung, Won-Jee;Lee, Choon-Man
    • Transactions of the Korean Society of Machine Tool Engineers
    • /
    • v.16 no.1
    • /
    • pp.40-46
    • /
    • 2007
  • High speed machining has become the main issue of metal cutting. Due to increase of the rotational speed of the spindle, problems such as the run-out errors and reduced stiffness must be overcome to improve the machining accuracy. In order to solve the problems, it is important to determine the appropriate clamping unit and tooling system. This paper presents an investigation into an analysis of static stiffness in the main spindle interface. Finite element analysis is performed by using a commercial code ANSYS according to variation of cutting force, clamping force and rotational speed. From the finite element results, it is shown that the rotational speed and clamping force mostly influence on the variation of the static stiffness in the main spindle interface.