Browsing by Author "Huang, SK"

Now showing 1 - 6 of 6

A testing framework for Web application security assessment
(2005-08-05)
Huang, YW
;
Tsai, CH
;
Lin, TP
;
Huang, SK
;
Lee, DT
The rapid development phases and extremely short turnaround time of Web applications make it difficult to eliminate their vulnerabilities. Here we study how software testing techniques such as fault injection and runtime monitoring can be applied to Web applications. We implemented our proposed mechanisms in the Web Application Vulnerability and Error Scanner (WAVES)-a black-box testing framework for automated Web application security assessment. Real-world situations are used to test WAVES and to compare it with other tools. Our results show that WAVES is a feasible platform for assessing Web application security. (c) 2005 Elsevier B.V. All rights reserved.
Dynamic Java program corpus analysis - Part 1: The analyzer
(2001-05-01)
Hwang, CC
;
Chen, DJ
;
Huang, SK
;
Lin, MS
;
交大名義發表
Program corpus analysis is important in the optimization of runtime systems. Conventional linguistic analysis is static in nature and cannot reflect dynamic behaviors revealed by versatile object-oriented programming languages. We propose a pattern-based runtime profiler in this article. Unlike a conventional profiler or runtime visualization tools, representative program corpora accumulated and benchmarked not only shows monolithic functions that introduce excessive runtime overhead, hut also reflect their correlated code patterns, We propose a pattern-based analysis to address a program runtime bottleneck in a sequence of method invocations. It will reveal more semantic meanings in performance bottleneck rendered by object-oriented programming systems.
Dynamic Java program corpus analysis - Part 2: The control pattern analysis
(2001-06-01)
Hwang, CC
;
Chen, DJ
;
Huang, SK
;
Lin, MS
;
交大名義發表
Code patterns are statically recurring structures specific to a programming language, Control patterns are dynamically recurring structures invoked during program execution time, We have proposed a runtime profiler based on control patterns and demonstrate that all runtime traces can be represented by these patterns, A transformed form can be fed into a data-mining(1,2) analyzer(3) to find out if the recurring structures represent runtime behaviors.
Integration of Reusable Software Components and frameworks into a visual software construction approach
(2000-11-01)
Chen, DJ
;
Koong, CS
;
Chen, WC
;
Huang, SK
;
van Diepen, NWP
Software reuse is an effective means of improving software productivity and software quality. Reusable Software Components (RSCs) are the basic building components for software programs constructed using the software reuse approach. The object-oriented approach is used to design and implement our RSCs. Our laboratory has already implemented more than 300 reusable software components, including design-level frameworks in various application domains and approximately 200,000 lines of code in our library. These components and frameworks have been accumulated in the course of designing and implementing strategy-based game systems, multimedia authoring systems (2-D and 3-D), multimedia playback systems, and other application systems. Multimedia software plays an important role in the software industry. In contrast to traditional software, multimedia software provides users with visual and audio effects through their interfaces and can more accurately model the real world. A media component may contain various elements, such as text descriptions, voice narration, and animation sequences, which more closely present the subject to be modeled. Such a reusable media component is commonly referred to as a Multimedia Reusable Component(MRC). Using RSCs, frameworks, and MRCs, our laboratory has successfully designed and implemented a commercial product called DIY Magic Cartoon World for use in making subject-based cartoons. The RSCs and frameworks can be visualized as icons for a visual programming model. Reuse-in-large practice is, therefore, achieved using visual programming techniques based on these visualized components. In this study, we introduce design principles and implementation techniques for our RSCs, frameworks, and MRCs. RSCs, frameworks, and MRCs are integrated into a visual software construction approach. More specifically, the design concept and implementation of an approachfor visual software construction are described. In addition to discussing the advantages of the proposed construction approach, this work also presents examples which illustrate how the visual programming environment is used.
Mining control patterns from Java program corpora
(2004-01-01)
Chen, DJ
;
Hwang, CC
;
Huang, SK
;
Chen, DTK
;
資訊工程學系
Java programming, based on the Object-Oriented (OO) paradigm, has played a major role in program design and implementation due to the fact that it is extensible, maintainable, and reusable in software system construction. Experiences with using Java programming have indicated that there also exist disadvantages with respect to its execution inefficiency and complicated runtime behaviors. Code-patterns are statically recurring structures specifically related to a programming language. They can be used in parallel to help programmer design software systems to solve particular problems. In opposition to the role of code-patterns in assisting compilation, control-pattems are dynamically recurring structures invoked during program execution time. They can be used to understand the run-time behaviors of OO-programs with respect to the underlying architecture, such as Java-VM. A control pattern describes the model of control transfer among objects during OO program execution. In this paper, several control patterns are proposed and discussed. We have analyzed and collected several control patterns from several Java program corpora. The experimental results show that control patterns do exist and provide information for quantitative analysis. Simple patterns, compound patterns, and complex patterns have different ratios depending on their source programs. Collected control patterns can be used to provide guidelines for Java programmers so that they can write more effective Java programs.
Object-oriented program behavior analysis based on control patterns
(2001)
Hwang, CC
;
Huang, SK
;
Chen, DJ
;
Chen, DTK
;
資訊工程學系
Code-patterns are statically recurring structure specific to a programming language. It can be parallel to aid in designing software systems for solving particular problems. Contrary to compilation assistance of code-patterns, control-patterns are dynamically recurring structures invoked during program execution time. It can be used for benchmarking OO-programs and underlying architecture like Java and Java-VM. We have proposed a run-rime profiler based on control patterns and show that all run-time trace can be represented by, a directed graph, a constrained output and a Boolean function. A transformed graph can be fed into a data-mining analyzer to find out the recurring structure representing run-time behaviors.