DaV3is: Data Flow-Based Vulnerability Verification Through Visualization

Normally, software documentations are produced, informally. They are written in the unnatural and non-structural form of the language, such as user manuals, user requirements, design documentation, tutorials, support documentation, and so on. Recent studies show that 61% of software projects are subject to failure or challenges due to an increase in the costs and production time. Various factors may lead to this issue, and one of the major contributing factors is the lack of links between the software's source code and its related documents. The significance of software development and the possibility of making prospective changes by the development team necessitate an understanding of the links between various sections of codes and documentations. Therefore, it is crucial to design a system to link the software codes to their corresponding textual documentation. This article proposes a model for recovering the latent, but traceable links between software source codes and existing documents based on word extraction and function name separation. The contributions in this article include: (1) a model based on word extraction from document and source codes; (2) the proposal of an algorithm for splitting compound words and words that are connected to one another and completing abbreviations used in the names of functions, variables, and output commands; and (3) a new algorithm that is proposed for retrieving traceable latent links between the source code and documents. Two data sets are used in this research and the achieved results will be reported in terms of recall, precision, and F-measure. The experimental results are promising and indicate that the proposed approach significantly outperforms its counterparts.

Software ownership allows the owner to restrict the distribution of software and to prevent others from reading the software's source code and building upon it. However, free software is released to users under software licenses that give them the right to read the source code, modify it, reuse it, and distribute the software to others. Proponents of free software such as Richard M. Stallman and Eben Moglen argue that the social disutility of software ownership is a sufficient justification for prohibiting it. This social disutility includes the social instability of disregarding laws and agreements covering software use and distribution, inequality of software access, and the inability to help others by sharing software with them. Here I consider these and other social disutility claims against withholding specific software rights from users, in particular, the rights to read the source code, duplicate, distribute, modify, imitate, and reuse portions of the software within new programs. I find that generally while withholding these rights from software users does cause some degree of social disutility, only the rights to duplicate, modify and imitate cannot legitimately be denied to users on this basis. The social disutility of withholding the rights to distribute the software, read its source code and reuse portions of it in new programs is insufficient to prohibit software owners from denying them to users. A compromise between the software owner and user can minimise the social disutility of withholding these particular rights from users. However, the social disutility caused by software patents is sufficient for rejecting such patents as they restrict the methods of reducing social disutility possible with other forms of software ownership.

Software that operates actively needs to be adequately managed and maintained to avoid future problems. One of the problems in the software is the existence of code smells. A code smell indicates that a problem will, in turn, occur in the software's source code. OpenSID is open-source software used to create village administration websites. The detection carried out in this study shows that the OpenSID source code contains 32 code smells of High Cyclomatic Complexity type, which, if left untreated, can cause problems in the future. One of the problems is the reduced level of maintainability of the software. This research performs refactoring using the Extract Function method on a High Cyclomatic Complexity code smell to analyze what effect refactoring has on the code smell and its impact on the value of the OpenSID Maintainability Index. The research used the following tools: PHPMD, PHPDepend, and PhpStorm®. The results showed that after refactoring, the High Cyclomatic Complexity code smells were gone in some functions, and the average value of the OpenSID Maintainability Index increased from 37.0337 to 42.0912. Even though, in the end, the maintainability of this software is still in the category of difficult to maintain, this Maintainability Index increases to 13.66% has shown that the refactoring Extract Function method in code smells High Cyclomatic Complexity can increase the maintainability of this software.

Software plays an increasingly important role in today's world. With the advent of open-source software, an increasing number of developers begin to focus on and apply open-source software as a basic tool for their program development. However, at the same time, introducing open-source software into their own software introduces various types of defects and disadvantages. These unknown risks may cause incalculable economic loss aud credit crises if they were to be exploited in the future. Therefore, it is an important and urgent problem to detect the components of open-source software that may be reused when outsourcing software. To help detecting opensource software components in large-scale software projects, this paper proposes automatic identification technology for subnetworks with similar structural characteristics. This technology is based on node role classification, node similarity matching, and similar subnetwork search. This subject applies complex network technology to the comparison of software networks. In contrast to traditional code detection technology, this study does not constrain the text information of the software's source code. Considering that the basic skeleton structure of an application, in the processes of code reuse and features, remains the same, its network structure is used instead of its software structure to avoid problems such as poor detection results of similar codes as a result of text modification. This technology starts from the software features and the structure of software network.

As the supervisory control and data acquisition (SCADA) become more and more distributed and complex, the job of designing data acquisition server (DAS) software is very challenging. This paper advances a new design method for data acquisition server software based on multi-agent. By using multi-agent technology, the flexible intelligent communication protocol interface and optimal load balancing policy are designed to tackle the problems of variety communication protocols and heavy network loads. It can easily add new protocol or modify protocol without any modification of the protocol interface software's source code. So, the performance such as scalability and maintainability of the DAS has been greatly improved. This method has already been applied in the real project, and the desirable result of the project field proves its validity.

Program understanding aims at discovering human-readable properties of a software project from the analysis of its source code. Recently, we proposed a smart approach based on hierarchical agglomerative clustering that extracts so-called it program topoi from source code. These topoi are high-level observable properties of the project. Based on textual and structural representations of the source code, our multi-steps approach clusters program topoi in an effective and efficient way. In this paper, we depict novel exploitation tasks of this program understanding approach and report on its application to Software Heritage. Software Heritage is an ambitious project which aims at collecting and archiving the biggest corpus of publicly available software source code. One of the project goals is to provide a new scientific instrument for computer scientists to evaluate advanced machine learning and software engineering methods on a very large source code repository. Our in-depth experiments reveal that unsupervised learning is the appropriate tool to mine and understand the biggest corpus of software source code ever produced.

소프트웨어 산업은 21세기 정보화 사회의 발전에 있어서도 중요한 역할을 하고 있다. 소프트웨어 소스 코드의 소유권 분쟁이 발생 시 소유권을 증명하기 위해서는 원본의 소프트웨어 소스코드를 판별해야만 하는 문제점을 갖고 있다. 본 논문에서는 소프트웨어 소스코드의 원본 판별을 지원하기 위한 소프트웨어 소스코드의 디지털 라이센스는 소스코드의 예약어를 파싱하여 계층구조를 갖는 XML 파일로 표현하며, 복잡한 소스코드 대신에 소프트웨어 소스코드의 노드 패턴과 아키텍처 패턴인 트리 구조 형태로 표현할 수 있다. 그리고 디지털 라이센스에 의한 소스코드의 분류 가능성에 대한 시뮬레이션과 크립텍스 모델을 제안한다. The software industry is so important to the 21C information society Not only the digital content control but the technology of software source code for the intellectual property is so much mean to international competition. On occurring disputation property of software source code, we have to prove the fact, there is a problem to discriminate the original software source code. In this paper, we make a study of the digital licence prototype for discriminate the original source code. Reserved words of software source code by parsing express to XML file that have hierarchical structure. Then, we can express node pattern and architecture pattern of software source code by tree structure form instead of complex software source code. And we make a simulation of discrimination possibility of digital license and propose CRYPTEX model.

This paper presents a technique to detect clones in source code by comparing the operations performed in the statements comprising a function. The key concept used is that two functions are considered clones if the statements in the functions perform the same operation up to a certain extent. This could be ascertained by categorizing the available statement types based on the operations performed (for instance, addition, multiplication, function invocation, etc). Then, a category is assigned to each statement present in every function in the source code. Comparisons are then made between functions by comparing the categories of the statements to each other. If one function contains exactly the same categories of statement as another (same operations performed in both the functions), or contains a subset of statement categories (operations performed in one function are subset of another), then these functions are judged to be clones.

Since the source code is only one of many types of documents that must be maintained as a software system evolves, modern software development could be improved by better interoperability between source code and other software documents. The Software Concordance is a prototype programming environment that uses hypermedia services and a uniform document model to achieve this interoperability. The Software Concordance editor allows developers to enhance their inline documentation with multimedia objects and hyperlinks, while still supporting advanced program analysis including lexing, parsing and type checking. We motivate the need for environments like the Software Concordance, describe the design and implementation of its program editor, and discuss lessons learned while creating it. The system is based on a uniform, Web compatible document model for both program source code and nonprogram software documents and a corresponding API. Important technical problems addressed by this research include creating a persistent representation of program lexemes that the analysis suite considers to be ephemeral (such as keywords), providing a simple incremental parsing system, and embedding multimedia in source code without disrupting program analysis. Based on insight gained in the process of implementing the document API, a new approach to the design of a more suitable program analysis infrastructure is suggested.

The source code of software is typically managed by version control systems that keep track of the different versions of files over time. As versioning is associated with a file and not a class, the versioning mechanism is semantically detached from the actual source code. This paper introduces the concept of revision classes. Revision classes provide an explicit versioning mechanism for classes that, similar to inheritance, allows the developer to redefine existing class members and add new class members in a new version. This explicit versioning mechanism allows the developer to explicitly declare the deltas to a previous version. The developer may reflect on the necessity of updates and thus errors can be avoided that sneak into the source code by inconsiderate changes.

This Software Configuration Management Plan (SCMP) provides the instructions for change control of the W-211 Project, Retrieval Control System (RCS) software after initial approval/release but prior to the transfer of custody to the waste tank operations contractor. This plan applies to the W-211 system software developed by the project, consisting of the computer human-machine interface (HMI) and programmable logic controller (PLC) software source and executable code, for production use by the waste tank operations contractor. The plan encompasses that portion of the W-211 RCS software represented on project-specific AUTOCAD drawings that are released as part of the C1 definitive design package (these drawings are identified on the drawing list associated with each C-1 package), and the associated software code. Implementation of the plan is required for formal acceptance testing and production release. The software configuration management plan does not apply to reports and data generated by the software except where specifically identified. Control of information produced by the software once it has been transferred for operation is the responsibility of the receiving organization.

The WISE Technology (WinSoft Instrument System Emulator) allows the reuse of Legacy Test System's software in the Next Generation Testers while preserving the old TPS. The technology supports common programming languages (e.g. ATLAS, HP- BASIC, Fortran, etc.) common communication protocols (GPIB, USB, LXI, etc.) and common instruments (Rack-mount, VXI, PXI, Synthetic Instruments). The COBRA 1000/11 enables replacement of HPI000 and PDP-11 while preserving the old TPS. New TPSs (LabVIEW, C/C++, VB) can be developed and run on the COBRA. There is no change to the legacy software and the source code is not required. A combination of the technologies enables the Next Generation testers to utilize the latest technology available (software and hardware) while still running existing TPS for years to come

Cultural heritage is the legacy of physical artifacts and intangible attributes of a group or society that a re inherited from past generations, maintained in the present and bestowed for the benefit of future generations.What role does software play in it? We claim that software source code is an important product of human creativity, and embodies a growing part of our scientific, organisational and technological knowledge: it is a part of our cultural heritage, and it is our collective responsibility to ensure that it is not lost.Preserving the history of software is also a key enabler for reproducibility of research, and as a means to foster better and more secure software for society. This is the mission of Software Heritage, a non-profit organization dedicated to building the universal archive of software source code, catering to the needs of science, industry and culture, for the benefit of society as a whole.In this keynote talk we survey the principles and key technology used in the archive that contains over 12 billion unique source code files from some 180 millions projects worldwide.

Non-invasive techniques (e.g., photogrammetry and laser scanning) are becoming crucial methods for archaeological applications, such as monitoring, revealing, and preserving buried monuments. Visual analysis techniques based on photogrammetric-derived digital models have been applied in several scientific fields, particularly in digital archaeology. Examining the capabilities of these techniques (visual analysis techniques) for archaeological prospection and enhancing the effectiveness of existing approaches are therefore fundamental themes in digital archaeology. This research aimed to evaluate the capabilities of different visual analysis techniques derived from the Structure from Motion and multi-view stereoscopic (SfM-MVS) methods in identifying archaeological remains in the ancient city of Babylon, the capital of the ancient Babylonian civilization in Mesopotamia. These techniques can produce: 1) standalone raster images, such as hillshade, slope gradient, local relief, and sky-view factor (SVF); and 2) fusible new rasters that could produce by integrateing multi-layered topographic data calculated from gridded digital models towards detecting new potential findings. In this study, raw aerial images were collected using a DJI Phantom 4 Pro drone over the ancient city of Babylon in summer 2018. The raster layers obtained from the derived SfM digital models (i.e., DSM) are applied to trace buried monuments that could reveal possible new attributes of the ancient city structure. Using more than one raster image in prospecting is critical to confirm possible new archaeological remains. Although these raster images have the same fine grain (2.19 cm/pix), they have various merits in terms of highlighting topographic features in the investigated site. The combination of different visualization tools (e.g., DSM, differential openness, and SVF layers) into a new integrated single raster could simultaneously emphasis and advance the identification of archaeological features, such as edges, circular, and linear features in comparison with a standalone raster approach. Therefore, this study revealed several potential buried monuments, such as foundations, construction remains, and paths of the archaeological site. These non-destructive approaches for prospecting and detection archaeological remains should be applied more widely by the digital archaeological community to enhance the evaluation of archaeological change and promote comprehension of understudied archaeological areas worldwide.

This paper aims to propose a new method based on binary instruction structure analysis to detect the degree of similarity among softwares, which provides a technical reference for the software clone detection. Without source codes of software, it makes a reverse analysis of the disassembly of an executable file, and has similarity intercomparison through function snipping, instructions classifying and weighting on the function similarity which is computed by the longest common subsequence (LCS). In the process of intercomparsion, this paper has considered that the program execution process and the function call sequences have impact on the code layout. The algorithm is optimized to achieve more accurate similarity by parsing and optimizing the executable file structure on the level of instruction executive structure. It provides a new way to detect software clone in case of no source codes, which is proved effective by the experiment.