Open Access. Powered by Scholars. Published by Universities.®

Software Engineering Commons™

Open Access. Powered by Scholars. Published by Universities.®

Research Collection School Of Computing and Information Systems

Discipline
Keyword
Publication Year

Articles 1111 - 1140 of 2149

Full-Text Articles in Software Engineering

An Integrated Approach For Effective Injection Vulnerability Analysis Of Web Applications Through Security Slicing And Hybrid Constraint Solving, Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel Briand Jun 2018

An Integrated Approach For Effective Injection Vulnerability Analysis Of Web Applications Through Security Slicing And Hybrid Constraint Solving, Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel Briand

Research Collection School Of Computing and Information Systems

Malicious users can attack Web applications by exploiting injection vulnerabilities in the source code. This work addresses the challenge of detecting injection vulnerabilities in the server-side code of Java Web applications in a scalable and effective way. We propose an integrated approach that seamlessly combines security slicing with hybrid constraint solving; the latter orchestrates automata-based solving with meta-heuristic search. We use static analysis to extract minimal program slices relevant to security from Web programs and to generate attack conditions. We then apply hybrid constraint solving to determine the satisfiability of attack conditions and thus detect vulnerabilities. The experimental results, using …

Go to article

Towards Optimal Concolic Testing, Xinyu Wang, Jun Sun, Zhenbang Chen, Peixin Zhang, Jingyi Wang, Yun Lin Jun 2018

Towards Optimal Concolic Testing, Xinyu Wang, Jun Sun, Zhenbang Chen, Peixin Zhang, Jingyi Wang, Yun Lin

Research Collection School Of Computing and Information Systems

Concolic testing integrates concrete execution (e.g., random testing) and symbolic execution for test case generation. It is shown to be more cost-effective than random testing or symbolic execution sometimes. A concolic testing strategy is a function which decides when to apply random testing or symbolic execution, and if it is the latter case, which program path to symbolically execute. Many heuristics-based strategies have been proposed. It is still an open problem what is the optimal concolic testing strategy. In this work, we make two contributions towards solving this problem. First, we show the optimal strategy can be defined based on …

Go to article

Static Analysis Of Context Leaks In Android Applications, Flavio Toffalini, Jun Sun, Martín Cohoa Jun 2018

Static Analysis Of Context Leaks In Android Applications, Flavio Toffalini, Jun Sun, Martín Cohoa

Research Collection School Of Computing and Information Systems

Android native applications, written in Java and distributed in APK format, are widely used in mobile devices. Their specific pattern of use lets the operating system control the creation and destruction of key resources, such as activities and services (contexts). Programmers are not supposed to interfere with such lifecycle events. Otherwise contexts might be leaked, i.e. they will never be deallocated from memory, or be deallocated too late, leading to memory exhaustion and frozen applications. In practice, it is easy to write incorrect code, which hinders garbage collection of contexts and subsequently leads to context leakage.In this work, we present …

Go to article

Analysing Multi-Point Multi-Frequency Machine Vibrations Using Optical Sampling, Dibyendu Roy, Avik Ghose, Tapas Chakravarty, Sushovan Mukherjee, Arpan Pal, Archan Misra Jun 2018

Analysing Multi-Point Multi-Frequency Machine Vibrations Using Optical Sampling, Dibyendu Roy, Avik Ghose, Tapas Chakravarty, Sushovan Mukherjee, Arpan Pal, Archan Misra

Research Collection School Of Computing and Information Systems

Vibration analysis is a key troubleshooting methodology for assessing the health of factory machinery. We propose an unobtrusive framework for at-a-distance visual estimation of such (possibly high frequency) vibrations, using a low fps (frames-per-second) camera that may, for example, be mounted on a worker's smart-glass. Our key innovation is to use an external stroboscopic light source (that, for example, may be provided by an assistive robot), to illuminate the machine with multiple mutually-prime strobing frequencies, and use the resulting aliased signals to efficiently estimate the different vibration frequencies via an enhanced version of the Chinese Remainder Theorem. Experimental results show …

Go to article

On-Demand Deep Model Compression For Mobile Devices: A Usage-Driven Model Selection Framework, Sicong Liu, Yingyan Lin, Zimu Zhou, Kaiming Nan, Hui Liu, Junzhao Du Jun 2018

On-Demand Deep Model Compression For Mobile Devices: A Usage-Driven Model Selection Framework, Sicong Liu, Yingyan Lin, Zimu Zhou, Kaiming Nan, Hui Liu, Junzhao Du

Research Collection School Of Computing and Information Systems

Recent research has demonstrated the potential of deploying deep neural networks (DNNs) on resource-constrained mobile platforms by trimming down the network complexity using different compression techniques. The current practice only investigate stand-alone compression schemes even though each compression technique may be well suited only for certain types of DNN layers. Also, these compression techniques are optimized merely for the inference accuracy of DNNs, without explicitly considering other application-driven system performance (e.g. latency and energy cost) and the varying resource availabilities across platforms (e.g. storage and processing capability). In this paper, we explore the desirable tradeoff between performance and resource constraints …

Go to article

Region-Aware Reflection Removal With Unified Content And Gradient Priors, Renjie Wan, Boxin Shi, Ling-Yu Duan, Ah-Hwee Tan, Wen Gao, Alex C. Kot Jun 2018

Region-Aware Reflection Removal With Unified Content And Gradient Priors, Renjie Wan, Boxin Shi, Ling-Yu Duan, Ah-Hwee Tan, Wen Gao, Alex C. Kot

Research Collection School Of Computing and Information Systems

Removing the undesired reflections in images taken through the glass is of broad application to various image processing and computer vision tasks. Existing single image-based solutions heavily rely on scene priors such as separable sparse gradients caused by different levels of blur, and they are fragile when such priors are not observed. In this paper, we notice that strong reflections usually dominant a limited region in the whole image, and propose a region-aware reflection removal approach by automatically detecting and heterogeneously processing regions with and without reflections. We integrate content and gradient priors to jointly achieve missing contents restoration, as …

Go to article

Inference Of Development Activities From Interaction With Uninstrumented Applications, Lingfeng Bao, Zhenchang Xing, Xin Xia, David Lo, Ahmed E. Hassan Jun 2018

Inference Of Development Activities From Interaction With Uninstrumented Applications, Lingfeng Bao, Zhenchang Xing, Xin Xia, David Lo, Ahmed E. Hassan

Research Collection School Of Computing and Information Systems

Studying developers’ behavior in software development tasks is crucial for designing effective techniques and tools to support developers’ daily work. In modern software development, developers frequently use different applications including IDEs, Web Browsers, documentation software (such as Office Word, Excel, and PDF applications), and other tools to complete their tasks. This creates significant challenges in collecting and analyzing developers’ behavior data. Researchers usually instrument the software tools to log developers’ behavior for further studies. This is feasible for studies on development activities using specific software tools. However, instrumenting all software tools commonly used in real work settings is difficult and …

Go to article

Empath-D: Vr-Based Empathetic App Design For Accessibility, Wonjung Kim, Kenny Tsu Wei Choo, Youngki Lee, Archan Misra, Rajesh Krishna Balan Jun 2018

Empath-D: Vr-Based Empathetic App Design For Accessibility, Wonjung Kim, Kenny Tsu Wei Choo, Youngki Lee, Archan Misra, Rajesh Krishna Balan

Research Collection School Of Computing and Information Systems

With app-based interaction increasingly permeating all aspects of daily living, it is essential to ensure that apps are designed to be inclusive and are usable by a wider audience such as the elderly, with various impairments (e.g., visual, audio and motor). We propose Empath-D, a system that fosters empathetic design, by allowing app designers, in-situ, to rapidly evaluate the usability of their apps, from the perspective of impaired users. To provide a truly authentic experience, Empath-D carefully orchestrates the interaction between a smartphone and a VR device, allowing the user to experience simulated impairments in a virtual world while interacting …

Go to article

Poster: Understanding The Role Of Reporting In Work Item Tracking Systems For Software Development: An Industrial Case Study, Kochhar Pavneet Singh, Stanislaw Swierc, Trevor Carnahan, Hitesh S. Sajnani, Meiyappan Nagappan Jun 2018

Poster: Understanding The Role Of Reporting In Work Item Tracking Systems For Software Development: An Industrial Case Study, Kochhar Pavneet Singh, Stanislaw Swierc, Trevor Carnahan, Hitesh S. Sajnani, Meiyappan Nagappan

Research Collection School Of Computing and Information Systems

Work item tracking systems such as Visual Studio Team Services, JIRA, and GitHub issue tracker are widely used by software engineers. They help in managing different kinds of deliverables (e.g.features, user stories, bugs), plan sprints, distribute tasks across the team and prioritize the work. While these tools provide reporting capabilities there has been little research into the role these reports play in the overall software development process. In this study, we conduct an empirical investigation on the usage of Analytics Service-A reporting service provided by Visual Studio Team Services (VSTS) to build dashboards and reports out of their work item …

Go to article

Libraryguru: Api Recommendation For Android Developers, Weizhao Yuan, Hoang H. Nguyen, Lingxiao Jiang, Yuting Chen Jun 2018

Libraryguru: Api Recommendation For Android Developers, Weizhao Yuan, Hoang H. Nguyen, Lingxiao Jiang, Yuting Chen

Research Collection School Of Computing and Information Systems

Developing modern mobile applications often require the uses of many libraries specific for the mobile platform, which can be overwhelmingly too many for application developers to find what are needed for a functionality and where and how to use them properly. This paper presents a tool, named LibraryGuru, to recommend suitable Android APIs for given functionality descriptions. It not only recommends functional APIs that can be invoked for implementing the functionality, but also recommends event callback APIs that are inherent in the Android framework and need to be overridden in the application. LibraryGuru internally builds correlation databases among various functionality …

Go to article

Annapurna: Building A Real-World Smartwatch-Based Automated Food Journal, Sougata Sen, Vigneshwaran Subbaraju, Archan Misra, Rajesh Krishna Balan, Youngki Lee Jun 2018

Annapurna: Building A Real-World Smartwatch-Based Automated Food Journal, Sougata Sen, Vigneshwaran Subbaraju, Archan Misra, Rajesh Krishna Balan, Youngki Lee

Research Collection School Of Computing and Information Systems

We describe the design and implementation of a smartwatch-based, completely unobtrusive, food journaling system, where the smartwatch helps to intelligently capture useful images of food that an individual consumes throughout the day. The overall system, called Annapurna, is based on three key components: (a) a smartwatch-based gesture recognizer to identify eating gestures, (b) a smartwatch-based image capturer that obtains a small set of relevant and useful images with a low energy overhead, and (c) a server-based image filtering engine that removes irrelevant uploaded images, and then catalogs them through a portal. Our primary challenge is to make the system robust …

Go to article

Where Does Google Find Api Documentation?, Christoph Treude, Maurício Aniche Jun 2018

Where Does Google Find Api Documentation?, Christoph Treude, Maurício Aniche

Research Collection School Of Computing and Information Systems

The documentation of popular APIs is spread across many formats, from vendor-curated reference documentation to Stack Overflow threads. For developers, it is often not obvious from where a particular piece of information can be retrieved. To understand this documentation landscape, we systematically conducted Google searches for the elements of ten popular APIs. We found that their documentation is widely dispersed among many sources, that GitHub and Stack Overflow play a prominent role among the search results, and that most sources are quick to document new API functionalities. These findings inform API vendors about where developers find documentation about their products, …

Go to article

Towards Model Checking Android Applications, Guangdong Bai, Quanqi Ye, Yongzheng Wu, Heila Botha, Jun Sun, Yang Liu, Jin Song Dong, Willem Visser Jun 2018

Towards Model Checking Android Applications, Guangdong Bai, Quanqi Ye, Yongzheng Wu, Heila Botha, Jun Sun, Yang Liu, Jin Song Dong, Willem Visser

Research Collection School Of Computing and Information Systems

As feature-rich Android applications (apps for short) are increasingly popularized in security-sensitive scenarios, methods to verify their security properties are highly desirable. Existing approaches on verifying Android apps often have limited effectiveness. For instance, static analysis often suffers from a high false-positive rate, whereas approaches based on dynamic testing are limited in coverage. In this work, we propose an alternative approach, which is to apply the software model checking technique to verify Android apps. We have built a general framework named DroidPF upon Java PathFinder (JPF), towards model checking Android apps. In the framework, we craft an executable mock-up Android …

Go to article

How Does Developer Interaction Relate To Software Quality? An Examination Of Product Development Data, Subhajit Datta Jun 2018

How Does Developer Interaction Relate To Software Quality? An Examination Of Product Development Data, Subhajit Datta

Research Collection School Of Computing and Information Systems

Industrial software systems are being increasingly developed by large and distributed teams. Tools like collaborative development environments (CDE) are used to facilitate interaction between members of such teams, with the expectation that social factors around the interaction would facilitate team functioning. In this paper, we first identify typically social characteristics of interaction in a software development team: reachability, connection, association, and clustering. We then examine how these factors relate to the quality of software produced by a team, in terms of the number of defects, through an empirical study of 70+ teams, involving 900+ developers in total, spread across 30+ …

Go to article

Satd Detector: A Text-Mining-Based Self-Admitted Technical Debt Detection Tool, Zhongxin Liu, Qiao Huang, Xin Xia, Emad Shihab, David Lo, Shanping Li Jun 2018

Satd Detector: A Text-Mining-Based Self-Admitted Technical Debt Detection Tool, Zhongxin Liu, Qiao Huang, Xin Xia, Emad Shihab, David Lo, Shanping Li

Research Collection School Of Computing and Information Systems

In software projects, technical debt metaphor is used to describe the situation where developers and managers have to accept compromises in long-Term software quality to achieve short-Term goals. There are many types of technical debt, and self-Admitted technical debt (SATD) was proposed recently to consider debt that is introduced intentionally (e.g., through temporaryfi x) and admitted by developers themselves. Previous work has shown that SATD can be successfully detected using source code comments. However, most current state-of-The-Art approaches identify SATD comments through pattern matching, which achieve high precision but very low recall. That means they may miss many SATD comments …

Go to article

Table Of Interest: Activity Recognition And Behaviour Analysis Using A Battery Lesswearable Sensor, Dibyanshu Jaiswal, Andrew Gigie, Tapas Chakravarty, Avik Ghose, Archan Misra Jun 2018

Table Of Interest: Activity Recognition And Behaviour Analysis Using A Battery Lesswearable Sensor, Dibyanshu Jaiswal, Andrew Gigie, Tapas Chakravarty, Avik Ghose, Archan Misra

Research Collection School Of Computing and Information Systems

Energy overheads continue to be a major impediment for wearable based activity recognition systems. We proposed a hybrid approach, which combines wearable-based human sensing with object interaction tracking, for robust detection of ADLs in smart homes. Our proposed framework includes: (a) battery less, low sampling rate, wearable RF sensor tags, that are powered intermittently by an RFID reader, and (b) additional passive RF tags, mounted on daily use objects, that capture the presence and use of specific objects while performing such ADLs. Using an initial experimental set up, we show the ability to recognize activities like eating, typing and reading, …

Go to article

D-Pruner: Filter-Based Pruning Method For Deep Convolutional Neural Network, Nguyen Loc Huynh, Youngki Lee, Rajesh Krishna Balan Jun 2018

D-Pruner: Filter-Based Pruning Method For Deep Convolutional Neural Network, Nguyen Loc Huynh, Youngki Lee, Rajesh Krishna Balan

Research Collection School Of Computing and Information Systems

The emergence of augmented reality devices such as Google Glass and Microsoft Hololens has opened up a new class of vision sensing applications. Those applications often require the ability to continuously capture and analyze contextual information from video streams. They often adopt various deep learning algorithms such as convolutional neural networks (CNN) to achieve high recognition accuracy while facing severe challenges to run computationally intensive deep learning algorithms on resource-constrained mobile devices. In this paper, we propose and explore a new class of compression technique called D-Pruner to efficiently prune redundant parameters within a CNN model to run the model …

Go to article

D-Pruner: Filter-Based Pruning Method For Deep Convolutional Neural Network, Nguyen Loc Huynh, Youngki Lee, Rajesh Krishna Balan Jun 2018

D-Pruner: Filter-Based Pruning Method For Deep Convolutional Neural Network, Nguyen Loc Huynh, Youngki Lee, Rajesh Krishna Balan

Research Collection School Of Computing and Information Systems

The emergence of augmented reality devices such as Google Glass and Microsoft Hololens has opened up a new class of vision sensing applications. Those applications often require the ability to continuously capture and analyze contextual information from video streams. They often adopt various deep learning algorithms such as convolutional neural networks (CNN) to achieve high recognition accuracy while facing severe challenges to run computationally intensive deep learning algorithms on resource-constrained mobile devices. In this paper, we propose and explore a new class of compression technique called D-Pruner to efficiently prune redundant parameters within a CNN model to run the model …

Go to article

Towards Easy Comparison Of Local Businesses Using Online Reviews, Yong Wang, Hammad Haleem, Conglei Shi, Yanhong Wu, Xun Zhao, Siwei Fu, Huamin Qu Jun 2018

Towards Easy Comparison Of Local Businesses Using Online Reviews, Yong Wang, Hammad Haleem, Conglei Shi, Yanhong Wu, Xun Zhao, Siwei Fu, Huamin Qu

Research Collection School Of Computing and Information Systems

With the rapid development of e-commerce, there is an increasing number of online review websites, such as Yelp, to help customers make better purchase decisions. Viewing online reviews, including the rating score and text comments by other customers, and conducting a comparison between different businesses are the key to making an optimal decision. However, due to the massive amount of online reviews, the potential difference of user rating standards, and the significant variance of review time, length, details and quality, it is difficult for customers to achieve a quick and comprehensive comparison. In this paper, we present E-Comp, a carefully-designed …

Go to article

Dynamic Pricing In Spatial Crowdsourcing: A Matching-Based Approach, Yongxin Tong, Libin Wang, Zimu Zhou, Lei Chen, Bowen Du, Jieping Ye Jun 2018

Dynamic Pricing In Spatial Crowdsourcing: A Matching-Based Approach, Yongxin Tong, Libin Wang, Zimu Zhou, Lei Chen, Bowen Du, Jieping Ye

Research Collection School Of Computing and Information Systems

In spatial crowdsourcing, requesters submit their task-related locations and increase the demand of a local area. The platform prices these tasks and assigns spatial workers to serve if the prices are accepted by requesters. There exist mature pricing strategies which specialize in tackling the imbalance between supply and demand in a local market. However, in global optimization, the platform should consider the mobility of workers; that is, any single worker can be the potential supply for several areas, while it can only be the true supply of one area when assigned by the platform. The hardness lies in the uncertainty …

Go to article

Multi-Worker-Aware Task Planning In Real-Time Spatial Crowdsourcing, Qian Tao, Yuxiang Zeng, Zimu Zhou, Yongxin Tong, Lei Chen, Ke Xu May 2018

Multi-Worker-Aware Task Planning In Real-Time Spatial Crowdsourcing, Qian Tao, Yuxiang Zeng, Zimu Zhou, Yongxin Tong, Lei Chen, Ke Xu

Research Collection School Of Computing and Information Systems

Spatial crowdsourcing emerges as a new computing paradigm with the development of mobile Internet and the ubiquity of mobile devices. The core of many real-world spatial crowdsourcing applications is to assign suitable tasks to proper workers in real time. Many works only assign a set of tasks to each worker without making the plan how to perform the assigned tasks. Others either make task plans only for a single worker or are unable to operate in real time. In this paper, we propose a new problem called the Multi-Worker-Aware Task Planning (MWATP) problem in the online scenario, in which we …

Go to article

Hierarchical Learning Of Cross-Language Mappings Through Distributed Vector Representations For Code, Nghi D. Q. Bui, Lingxiao Jiang May 2018

Hierarchical Learning Of Cross-Language Mappings Through Distributed Vector Representations For Code, Nghi D. Q. Bui, Lingxiao Jiang

Research Collection School Of Computing and Information Systems

Translating a program written in one programming language to another can be useful for software development tasks that need functionality implementations in different languages. Although past studies have considered this problem, they may be either specific to the language grammars, or specific to certain kinds of code elements (e.g., tokens, phrases, API uses). This paper proposes a new approach to automatically learn cross-language representations for various kinds of structural code elements that may be used for program translation. Our key idea is two folded: First, we normalize and enrich code token streams with additional structural and semantic information, and train …

Go to article

Finding Small-Bowel Lesions: Challenges In Endoscopy-Image-Based Learning Systems, Jungmo Ahn, Loc Nguyen Huynh, Rajesh Krishna Balan, Youngki Lee, Jeonggil Ko May 2018

Finding Small-Bowel Lesions: Challenges In Endoscopy-Image-Based Learning Systems, Jungmo Ahn, Loc Nguyen Huynh, Rajesh Krishna Balan, Youngki Lee, Jeonggil Ko

Research Collection School Of Computing and Information Systems

Capsule endoscopy identifies damaged areas in a patient's small intestine but often outputs poor-quality images or misses lesions, leading to either misdiagnosis or repetition of the lengthy procedure. The authors propose applying deep-learning models to automatically process the captured images and identify lesions in real time, enabling the capsule to take additional images of a specific location, adjust its focus level, or improve image quality. The authors also describe the technical challenges in realizing a viable automated capsule-endoscopy system.

Go to article

Wisdom In Sum Of Parts: Multi-Platform Activity Prediction In Social Collaborative Sites, Roy Ka-Wei Lee, David Lo May 2018

Wisdom In Sum Of Parts: Multi-Platform Activity Prediction In Social Collaborative Sites, Roy Ka-Wei Lee, David Lo

Research Collection School Of Computing and Information Systems

In this paper, we proposed a novel framework which uses user interests inferred from activities (a.k.a., activity interests) in multiple social collaborative platforms to predict users’ platform activities. Included in the framework are two prediction approaches: (i) direct platform activity prediction, which predicts a user’s activities in a platform using his or her activity interests from the same platform (e.g., predict if a user answers a given Stack Overflow question using the user’s interests inferred from his or her prior answer and favorite activities in Stack Overflow), and (ii) cross-platform activity prediction, which predicts a user’s activities in a platform …

Go to article

Analyzing Requirements And Traceability Information To Improve Bug Localization, Michael Rath, David Lo, Patrick Mader May 2018

Analyzing Requirements And Traceability Information To Improve Bug Localization, Michael Rath, David Lo, Patrick Mader

Research Collection School Of Computing and Information Systems

Locating bugs in industry-size software systems is time consuming and challenging. An automated approach for assisting the process of tracing from bug descriptions to relevant source code benefits developers. A large body of previous work aims to address this problem and demonstrates considerable achievements. Most existing approaches focus on the key challenge of improving techniques based on textual similarity to identify relevant files. However, there exists a lexical gap between the natural language used to formulate bug reports and the formal source code and its comments. To bridge this gap, state-of-the-art approaches contain a component for analyzing bug history information …

Go to article

Recommending Frequently Encountered Bugs, Yun Zhang, David Lo, Xin Xia, Jing Jiang, Jianling Sun May 2018

Recommending Frequently Encountered Bugs, Yun Zhang, David Lo, Xin Xia, Jing Jiang, Jianling Sun

Research Collection School Of Computing and Information Systems

Developers introduce bugs during software development which reduce software reliability. Many of these bugs are commonly occurring and have been experienced by many other developers. Informingdevelopers, especially novice ones, about commonly occurring bugsin a domain of interest (e.g., Java), can help developers comprehendprogram and avoid similar bugs in the future. Unfortunately, information about commonly occurring bugs are not readily available. Toaddress this need, we propose a novel approach named RFEB whichrecommends frequently encountered bugs (FEBugs) that may affectmany other developers. RFEB analyzes Stack Overflow which is thelargest software engineering-specific Q&A communities. Amongthe plenty of questions posted in Stack Overflow, many …

Go to article

Deep Code Comment Generation, Xing Hu, Ge Li, Xin Xia, David Lo, Zhi Jin May 2018

Deep Code Comment Generation, Xing Hu, Ge Li, Xin Xia, David Lo, Zhi Jin

Research Collection School Of Computing and Information Systems

During software maintenance, code comments help developerscomprehend programs and reduce additional time spent on readingand navigating source code. Unfortunately, these comments areoften mismatched, missing or outdated in the software projects.Developers have to infer the functionality from the source code.This paper proposes a new approach named DeepCom to automatically generate code comments for Java methods. The generatedcomments aim to help developers understand the functionalityof Java methods. DeepCom applies Natural Language Processing(NLP) techniques to learn from a large code corpus and generatescomments from learned features. We use a deep neural networkthat analyzes structural information of Java methods for bettercomments generation. We conduct …

Go to article

Learning From Mutants: Using Code Mutation To Learn And Monitor Invariants Of A Cyber-Physical System, Yuqi Chen, Christopher M. Poskitt, Jun Sun May 2018

Learning From Mutants: Using Code Mutation To Learn And Monitor Invariants Of A Cyber-Physical System, Yuqi Chen, Christopher M. Poskitt, Jun Sun

Research Collection School Of Computing and Information Systems

Cyber-physical systems (CPS) consist of sensors, actuators, and controllers all communicating over a network; if any subset becomes compromised, an attacker could cause significant damage. With access to data logs and a model of the CPS, the physical effects of an attack could potentially be detected before any damage is done. Manually building a model that is accurate enough in practice, however, is extremely difficult. In this paper, we propose a novel approach for constructing models of CPS automatically, by applying supervised machine learning to data traces obtained after systematically seeding their software components with faults ("mutants"). We demonstrate the …

Go to article

Sotorrent: Reconstructing And Analyzing The Evolution Of Stack Overflow Posts, Sebastian Baltes, Lorik Dumani, Christoph Treude, Stephan Diehl May 2018

Sotorrent: Reconstructing And Analyzing The Evolution Of Stack Overflow Posts, Sebastian Baltes, Lorik Dumani, Christoph Treude, Stephan Diehl

Research Collection School Of Computing and Information Systems

Stack Overflow (SO) is the most popular question-and-answer website for software developers, providing a large amount of code snippets and free-form text on a wide variety of topics. Like other software artifacts, questions and answers on SO evolve over time, for example when bugs in code snippets are fixed, code is updated to work with a more recent library version, or text surrounding a code snippet is edited for clarity. To be able to analyze how content on SO evolves, we built SOTorrent, an open dataset based on the official SO data dump. SOTorrent provides access to the version history …

Go to article

Anflo: Detecting Anomalous Sensitive Information Flows In Android Apps, Biniam Fisseha Demissie, Mariano Ceccato, Lwin Khin Shar May 2018

Anflo: Detecting Anomalous Sensitive Information Flows In Android Apps, Biniam Fisseha Demissie, Mariano Ceccato, Lwin Khin Shar

Research Collection School Of Computing and Information Systems

Smartphone apps usually have access to sensitive user data such as contacts, geo-location, and account credentials and they might share such data to external entities through the Internet or with other apps. Confidentiality of user data could be breached if there are anomalies in the way sensitive data is handled by an app which is vulnerable or malicious. Existing approaches that detect anomalous sensitive data flows have limitations in terms of accuracy because the definition of anomalous flows may differ for different apps with different functionalities; it is normal for “Health” apps to share heart rate information through the Internet …

Go to article

First Prev Next Last