面向开源代码复用的程序比对分析方法

Program Comparison Analysis Method for Open Source Code Reuse

开源代码复用是重要的软件开发模式,但开源许可证侵权与代码同步更新是当前开源代码复用中的2个主要问题。利用代码快照间的高度相似性特点,设计一种代码仓库的高效增量分析方法,在此基础上,利用Simhash算法将函数代码映射成函数指纹,提出以函数为基本分析单元的工程相似度计算方法,从而降低分析结果的存储空间并提高代码比对速度。设计3组实验分别从代码分析效率、工程相似度判定和函数更新检测方面进行评估,结果表明,该方法能满足开源代码复用中相似度检测和代码溯源的需求,且能够有效缩短总体分析时间。

As an important software development mode,open source code reuse suffers from two major problems:open source license infringement and synchronous update of code.So this paper designs an efficient incremental analysis method of code warehouse by utilizing the high similarities between code snapshots.On this basis,the Simhash algorithm is used to map the function code into the function fingerprint.Then,the engineering similarity calculation method that takes function as the basic analysis unit is proposed,so as to reduce the storage space of analysis results and improve the speed of code comparison.Three groups of experiments are designed to evaluate the effectiveness of the proposed method from the aspects of code analysis efficiency,engineering similarity determination and function update detection respectively.Results show that the proposed method can meet the needs of similarity detection and code traceability in open source code reuse,as well as effectively reducing the overall analysis time.