Software Vulnerability Mining and Analysis Based on Deep Learning

In recent years,the rapid development of computer software has led to numerous security problems,particularly software vulnerabilities.These flaws can cause significant harm to users’privacy and property.Current security defect detection technology relies on manual or professional reasoning,leading to missed detection and high false detection rates.Artificial intelligence technology has led to the development of neural network models based on machine learning or deep learning to intelligently mine holes,reducing missed alarms and false alarms.So,this project aims to study Java source code defect detection methods for defects like null pointer reference exception,XSS(Transform),and Structured Query Language(SQL)injection.Also,the project uses open-source Javalang to translate the Java source code,conducts a deep search on the AST to obtain the empty syntax feature library,and converts the Java source code into a dependency graph.The feature vector is then used as the learning target for the neural network.Four types of Convolutional Neural Networks(CNN),Long Short-Term Memory(LSTM),Bi-directional Long Short-Term Memory(BiLSTM),and Attention Mechanism+Bidirectional LSTM,are used to investigate various code defects,including blank pointer reference exception,XSS,and SQL injection defects.Experimental results show that the attention mechanism in two-dimensional BLSTM is the most effective for object recognition,verifying the correctness of the method.

An Educational GUI-Based Software for Dynamic Analysis of Framed Structural Models

This paper introduces a new version of the open-source educational software, LESM (Linear Elements Structure Model), developed in MATLAB for structural analysis of one-dimensional models such as frames, trusses, and grillages. The updated program includes dynamic analysis, which incorporates inertial and damping effects, time-dependent load conditions, and a transient solver with multiple time integration schemes. The software assumes small displacements and linear-elastic material behavior. The paper briefly explains the theoretical basis for these developments and the reorganization of the source code using Object-Oriented Programming (OOP). The updated Graphical User Interface (GUI) allows interactive use of dynamic analysis features and displays new results such as animations, envelope diagrams of internal forces, phase portraits, and the response of degrees-of-freedom in time and frequency domain. The new version was used in a structural dynamics course, and new assignments were elaborated to improve students’ understanding of the subject.

Towards Improving the Quality of Requirement and Testing Process in Agile Software Development:An Empirical Study

Software testing is a critical phase due to misconceptions about ambiguities in the requirements during specification,which affect the testing process.Therefore,it is difficult to identify all faults in software.As requirement changes continuously,it increases the irrelevancy and redundancy during testing.Due to these challenges;fault detection capability decreases and there arises a need to improve the testing process,which is based on changes in requirements specification.In this research,we have developed a model to resolve testing challenges through requirement prioritization and prediction in an agile-based environment.The research objective is to identify the most relevant and meaningful requirements through semantic analysis for correct change analysis.Then compute the similarity of requirements through case-based reasoning,which predicted the requirements for reuse and restricted to error-based requirements.Afterward,the apriori algorithm mapped out requirement frequency to select relevant test cases based on frequently reused or not reused test cases to increase the fault detection rate.Furthermore,the proposed model was evaluated by conducting experiments.The results showed that requirement redundancy and irrelevancy improved due to semantic analysis,which correctly predicted the requirements,increasing the fault detection rate and resulting in high user satisfaction.The predicted requirements are mapped into test cases,increasing the fault detection rate after changes to achieve higher user satisfaction.Therefore,the model improves the redundancy and irrelevancy of requirements by more than 90%compared to other clustering methods and the analytical hierarchical process,achieving an 80%fault detection rate at an earlier stage.Hence,it provides guidelines for practitioners and researchers in the modern era.In the future,we will provide the working prototype of this model for proof of concept.

Analysis software for upper atmospheric data developed by the IUGONET project and its application to polar science

To comprehensively understand the Arctic and Antarctic upper atmosphere, it is often crucial to analyze various data that are obtained from many regions. Infrastructure that promotes such interdisciplinary studies on the upper atmosphere has been developed by a Japanese inter-university project called the Inter-university Upper atmosphere Global Observation Network （1UGONET）. The objective of this paper is to describe the infrastructure and tools developed by IUGONET. We focus on the data analysis software. It is written in Interactive Data Language （IDL） and is a plug-in for the THEMIS Data Analysis Software suite （TDAS）, which is a set of IDL libraries used to visualize and analyze satellite- and ground-based data. We present plots of upper atmospheric data provided by IUGONET as examples of applications, and verify the usefulness of the software in the study of polar science. We discuss IUGONET＇s new and unique developments, i.e., an executable file of TDAS that can run on the IDL Virtual Machine, IDL routines to retrieve metadata from the IUGONET database, and an archive of 3-D simulation data that uses the Common Data Format so that it can easily be used with TDAS.

Human Factors Analysis in Software Engineering

The general human factors analysis analyzes human functions, effects and influence in a system. But in a narrow sense, it analyzes human influence upon the reliability of a system, it includes traditional human reliability analysis, human error analysis, man-machine interface analysis, human character analysis, and others. A software development project in software engineering is successful or not to be completely determined by human factors. In this paper, we discuss the human factors intensions, declare the importance of human factors analysis for software engineering by listed some instances. At last, we probe preliminarily into the mentality that a practitioner in software engineering should possess. Key words human factors analysis - software engineering - software reliability CLC number TP 311.5 Foundation item: Supported by the National Natural Science Foundation of China (60173013)Biography: Xu Ren-zuo (1946-), male, Professor, research direction: software engineering, software reliability engineering, software safety and software testing.

Statistical Analysis of Process Monitoring Data for Software Process Improvement and Its Application

Software projects influenced by many human factors generate various risks. In order to develop highly quality software, it is important to respond to these risks reasonably and promptly. In addition, it is not easy for project managers to deal with these risks completely. Therefore, it is essential to manage the process quality by promoting activities of process monitoring and design quality assessment. In this paper, we discuss statistical data analysis for actual project management activities in process monitoring and design quality assessment, and analyze the effects for these software process improvement quantitatively by applying the methods of multivariate analysis. Then, we show how process factors affect the management measures of QCD (Quality, Cost, Delivery) by applying the multiple regression analyses to observed process monitoring data. Further, we quantitatively evaluate the effect by performing design quality assessment based on the principal component analysis and the factor analysis. As a result of analysis, we show that the design quality assessment activities are so effective for software process improvement. Further, based on the result of quantitative project assessment, we discuss the usefulness of process monitoring progress assessment by using a software reliability growth model. This result may enable us to give a useful quantitative measure of product release determination.

Systematic Analysis Method of Shear-Wave Splitting:SAM Software System

In order to make a more effective use of the data from regional digital seismograph networks and to promote the study on shear wave splitting and its application to earthquake stress-forecasting, SAM software system, i.e., the software on systematic analysis method of shear wave splitting has been developed. This paper introduces the design aims, system structure, function and characteristics about the SAM software system and shows some graphical interfaces of data input and result output. Lastly, it discusses preliminarily the study of shear wave splitting and its application to earthquake forecasting.

Economic and Technical Analysis of a Reverse-Osmosis Water Desalination Plant Using DEEP-3.2 Software

Reverse osmosis （RO） is proved to be the most reliable, cost effective, and energy efficient in producing fresh water compared to other desalination technologies. It is the fastest-growing desalination technology with a greater number of installations around the world. The economic and technical performance of a medium-capacity RO desalination plant （2,000 m^3/day） proposed to be installed in Umm Qasr city south of Basra, Iraq is analyzed using DEEP-3.2 software created by the International Atomic Energy Agency （IAEA）. This port city is located on the Gulf shore and does not have any fresh water resources. The analysis shows that the cost of fresh water produced by this plant is US$0.986/m^3 with a good quality of fresh water （279 ppm）, which is a reasonable price for this remote area. The analysis also shows an increase in water production cost of about 12% at increased electricity price from 0.06 to 0.1 US$/kWh, 53% when the seawater salinity increased from 35,000 to 45,000 ppm, 2.5% when the seawater temperature decreased from 33 ℃ to 20 ℃, and 0.71% when the interest rate increased from 0% to 5%. Pumping fresh water from the Basra purification plant （located 175 km north of Umm Qasr） is 22.16 times the cost and 236.7% poorer quality than the fresh water produced by the RO plant.

A Software Risk Analysis Model Using Bayesian Belief Network

The uncertainty during the period of software project development often brings huge risks to contractors and clients. If we can find an effective method to predict the cost and quality of software projects based on facts like the project character and two-side cooperating capability at the beginning of the project,we can reduce the risk. Bayesian Belief Network(BBN) is a good tool for analyzing uncertain consequences, but it is difficult to produce precise network structure and conditional probability table.In this paper,we built up network structure by Delphi method for conditional probability table learning,and learn update probability table and nodes’confidence levels continuously according to the application cases, which made the evaluation network have learning abilities, and evaluate the software development risk of organization more accurately.This paper also introduces EM algorithm, which will enhance the ability to produce hidden nodes caused by variant software projects.

Development and Analysis of a Machine Learning Based Software for Assisting Online Classes during COVID-19

Amid the Covid-19 widespread, it has been challenging for educational institutions to conduct online classes, facing multiples challenges. This paper provides an insight into different approaches in facing those challenges which includes conducting a fair online class for students. It is tough for an instructor to keep track of their students at the same time because it is difficult to screen if any of the understudies within the class are not present, mindful, or drowsing. This paper discusses a possible solution, something new that can offer support to instructors seeing things from a more significant point of view. The solution is a facial analysis computer program that can let instructors know which students are attentive and who is not. There’s a green and red square box for face detection, for which Instructors can watch by seeing a green box on those mindful students conjointly, a red box on those who are not mindful at all. This paper finds that the program can automatically give attendance by analyzing data from face detection. It has other features for which the teacher can also know if any student leaves the class early. In this paper, model design, performance analysis, and online class assistant aspects of the program have been discussed.

Various Software Packages for Analysis of Nuclear Magnetic Resonance Spectroscopic Data

The magnetic resonance spectroscopy(MRS)results are greatly influenced by reconstruction of the spectrum and quantitative analysis.Because of this requirement a number of programs dedicated to MRS data analysis were developed.The selection and use of appropriate software is crucial not only in clinical procedures,but also while carrying out scientific research.The choice of the software to suit the user's needs should be based on the analysis of the functionality of the program.It is particularly important from the user's viewpoint to identify what data can be loaded and processed in the program.The specific programs allow the user different degree of control over analysis parameters.Moreover,the programs for MRS data analysis differ in terms of the applied signal processing algorithms.The aim of this work,therefore,is to review available packages designed for MRS data analysis,taking into account their capabilities and limitations.

A Finite-Element Analysis on the Rheorolling Process of Semi-Solid Spring Steel

With a geometrical model of porous material, a 3D finite-element analysis on the rolling process of spring steel60Si2Mn in the semi-solid state is carried out using software MARC. In terms of flat and groove rolling conditions,stress field and strain field are studied. The simulation results show that the rigid-viscoplastic model can accuratelydescribe the semi-solid metal rolling process. Semi-solid slurry has the characteristics of low flow stress and goodfluidity. During groove rolling, distribution of stress and strain on the cross-section of deformation zone is moreuniform than that during flat rolling. The results of simulation are in good agreement with the experiment data, andshow that semi-solid material fits for groove rolling.

Development of SPM Quantitative Micromorphology Analysis Software

Scanning Probe Microscope (SPM) has great advantages in quantitative micromorphology analysis because of its conveniencein obtaining micromorphology information of materials on nanometer or atomic scale under control of a computer. Based on an established SPM quantitative micromorphology analysis model, an SPM image analysis software Which can calculate both two- and three-dimensional micromorphology parameters is developed.

Design and Power Flow Analysis of Electrical System Using Electrical Transient and Program Software

Power flow analysis is a numerical way of study of behavior of flow of electric power in an interconnected system. In order to meet the growing demands of electrical energy in an optimum way, there is a need to upgrade existing systems or to install new systems. Therefore, planning of new installations and determination of best operating conditions of existing systems need power flow analysis. In this way, cost/benefit ratio for both suppliers and customers is maintained. This research involves the design and power flow analysis of IEEE-14 bus system. Newton Raphson method is applied for better efficiency and reduced computational time. Simulation analysis is conducted in ETAP software because of its excessive used in real life systems.

Process of Requirement Analysis Link to Software Development

This paper is giving an overview of the process of requirement analysis for software development. Here I have discussed about key parts in requirement analysing, gathering relevant materials, functional analysis and allocations, how to improve and make a quality process and also document development as well and many more which relates to requirement analysis process. The scope of this study is not a generalized approach but rather discuss through specific cases such as like Dutch flower case. It describes the main areas of requirement process in practice, and highlights. I hope that readers will find this paper useful in guiding them toward the knowledge and resources they needed.

Modeling and Dynamic Analysis in Software Systems Based on Complex Networks

A software network model with multiple links is constructed on the basis of a dynamical model of a general complex network with mukiple links. The principle of network division of multiple links is introduced. Following these principles, the software network model is decomposed into three types of subnets and different relationships between classes are revealed. Then, the dynamic analysis of software networks is presented. A sufficient condition for the stability of general complex networks is obtained followed by that of software networks. Finally, the dynamics of an open-source software system is analyzed, and their simulations are provided to demonstrate the effectiveness of the presented model.

Study on spline wavelet finite-element method in multi-scale analysis for foundation

A new finite element method （FEM） of B-spline wavelet on the interval （BSWI） is proposed. Through analyzing the scaling functions of BSWI in one dimension, the basic formula for 2D FEM of BSWI is deduced. The 2D FEM of 7 nodes and 10 nodes are constructed based on the basic formula. Using these proposed elements, the multiscale numerical model for foundation subjected to harmonic periodic load, the foundation model excited by external and internal dynamic load are studied. The results show the pro- posed finite elements have higher precision than the tradi- tional elements with 4 nodes. The proposed finite elements can describe the propagation of stress waves well whenever the foundation model excited by extemal or intemal dynamic load. The proposed finite elements can be also used to con- nect the multi-scale elements. And the proposed finite elements also have high precision to make multi-scale analysis for structure.

Temporal Patterns of Software Evolution Defects: A Comparative Analysis of Open Source and Closed Source Projects

This study examines temporal patterns of software systems defects using the Autoregressive Integrated Moving Average (ARIMA) approach. Defect reports from ten software application projects are analyzed;five of these projects are open source and five are closed source from two software vendors. Across all sampled projects, the ARIMA time series modeling technique provides accurate estimates of reported defects during software maintenance, with organizationally dependent parameterization. In contrast to causal models that require extraction of source-code level metrics, this approach is based on readily available defect report data and is less computation intensive. This approach can be used to improve software maintenance and evolution resource allocation decisions and to identify outlier projects—that is, to provide evidence of unexpected defect reporting patterns that may indicate troubled projects.

A New Analysis Concept in Applying Software Reliability Growth Models and Tool Implementation: The SafeMan

In recent years, many software development organizations have been assessing and analyzing their software product’s reliability/quality and judging whether the software product is releasable by using Software Reliability Growth Models (SRGMs) at the final stage of software development. The usage of SRGMs originates in the advantage that various reliability analysis results based on the SRGMs can be acquired easily. However, it is very difficult for general software project managers to grasp the achievement level of reliability/quality based on its analysis results because some sort of professional knowledge is required in order to understand the information on the attainment progress of software product’s reliability/quality. Moreover, it is also difficult for software project managers and inspectors who do not deeply comprehend the details of their project to evaluate the degree of software reliability and quality, if they assess it without grasping the live development situation and only see the documents submitted from their staff. In this paper, we propose a new analysis concept for assessing the software product’s reliability/quality, and illustrate the output results obtained by a tool, the SafeMan.

A New Volumetric Parameter for a Comparative Finite-Element Analysis of a Six- or Four-Implant Mandibular Total-Arch Rehabilitation

In a full-arch implant rehabilitation ad modum Branemark, the distribution of stress and strain in mandibular bone is influenced by the type, number and position of implants used. In particular, the biomechanical behaviour of the bone structure after complete osseointegration depends on the load transferred to the bone by each fixture. In this study, a finite-element analysis of two models was performed. Models of an all-on-four configuration and a six-implant configuration were compared in a worst-case scenario. A new V parameter is presented to aid the quantitative and comparative analysis of the all-on-four and six-implant configurations. The influence of orthotropy was also investigated, and a geometric change in the all-on-four configuration is presented.