-
公开(公告)号：US08924938B2
公开(公告)日：2014-12-30
申请号：US11863387
申请日：2007-09-28
CPC分类号： G06F11/3688
摘要： A system and method for analyzing a computer program includes performing a static analysis on a program to determine property correctness. Test cases are generated and conducted to provide test output data. Hypotheses about aspects of execution of the program are produced to classify paths for test cases to determine whether the test cases have been encountered or otherwise. In accordance with the hypothesis, new test cases are generated to cause the program to exercise behavior which is outside of the encountered test cases.
摘要翻译： 用于分析计算机程序的系统和方法包括对程序执行静态分析以确定属性正确性。 产生并进行测试用例以提供测试输出数据。 产生关于程序执行方面的假设，以便对测试用例的路径进行分类，以确定是否遇到了测试用例。 根据该假设，生成新的测试用例，以使程序运行不在遇到的测试用例之外的行为。
-
公开(公告)号：US20080082968A1
公开(公告)日：2008-04-03
申请号：US11863387
申请日：2007-09-28
IPC分类号： G06F9/44
CPC分类号： G06F11/3688
摘要： A system and method for analyzing a computer program includes performing a static analysis on a program to determine property correctness. Test cases are generated and conducted to provide test output data. Hypotheses about aspects of execution of the program are produced to classify paths for test cases to determine whether the test cases have been encountered or otherwise. In accordance with the hypothesis, new test cases are generated to cause the program to exercise behavior which is outside of the encountered test cases.
摘要翻译： 用于分析计算机程序的系统和方法包括对程序执行静态分析以确定属性正确性。 产生并进行测试用例以提供测试输出数据。 产生关于程序执行方面的假设，以便对测试用例的路径进行分类，以确定是否遇到了测试用例。 根据该假设，生成新的测试用例，以使程序运行不在遇到的测试用例之外的行为。
-
公开(公告)号：US20100058475A1
公开(公告)日：2010-03-04
申请号：US12397041
申请日：2009-03-03
CPC分类号： H04L63/1433 , G06F21/577
摘要： Embodiments of the present invention combine static analysis, source code instrumentation and feedback-guided fuzz testing to automatically detect resource exhaustion denial of service attacks in software and generate inputs of coma for vulnerable code segments. The static analysis of the code highlights portions that are potentially vulnerable, such as loops and recursions whose exit conditions are dependent on user input. The code segments are dynamically instrumented to provide a feedback value at the end of each execution. Evolutionary techniques are then employed to search among the possible inputs to find inputs that maximize the feedback score.
摘要翻译： 本发明的实施例将静态分析，源代码仪表和反馈引导的模糊测试结合起来，自动检测软件中的资源耗尽拒绝服务攻击，并为脆弱的代码段生成昏迷的输入。 代码的静态分析突出显示可能易受攻击的部分，例如其退出条件取决于用户输入的循环和递归。 代码段被动态调整，以在每次执行结束时提供反馈值。 然后使用进化技术来搜索可能的输入以找到使反馈分数最大化的输入。
-
公开(公告)号：US08191045B2
公开(公告)日：2012-05-29
申请号：US12050624
申请日：2008-03-18
CPC分类号： G06F8/74 , G06F8/36 , G06F11/3672
摘要： A system and method for mining program specifications includes generating unit tests to exercise functions of a library through an application program interface (API), based upon an (API) signature. A response to the unit tests is determined to generate a transaction in accordance with a target behavior. The transaction is converted into a relational form, and specifications of the library are learned using an inductive logic programming tool from the relational form of the transaction.
摘要翻译： 一种用于挖掘程序规范的系统和方法包括：基于（API）签名，通过应用程序接口（API）生成单元测试来执行库的功能。 确定对单元测试的响应以根据目标行为生成交易。 该事务被转换为关系形式，并且使用来自事务的关系形式的归纳逻辑编程工具来学习库的规范。
-
公开(公告)号：US08006239B2
公开(公告)日：2011-08-23
申请号：US12015126
申请日：2008-01-16
CPC分类号： G06F11/3604
摘要： A computer implemented method for generating a representation of relationships between variables in a program employing Symbolic Range Constraints (SRCs) wherein the SRCs are of the form φ:^i=1nli≦xi≦ui where for each i ε[l,n], the linear expressions li,ui are made up of variables in the set{xi+1, . . . ,xn} and wherein the SRCs comprise linear, convex, and triangulated constraints for a given variable order.
摘要翻译： 一种用于生成使用符号范围约束（SRC）的程序中的变量之间关系的表示的计算机实现的方法，其中所述SRC具有以下形式：其中，对于每个i＆egr; [i，n] ]，线性表达式li，ui由集合{xi + 1，...中的变量组成。 。 。 ，xn}，并且其中SRC对于给定的变量顺序包括线性，凸形和三角形约束。
-
6.发明授权Scope bounding with automated specification inference for scalable software model checking 有权范围界定了可扩展软件模型检查的自动规范推理公开(公告)号：US08719793B2
公开(公告)日：2014-05-06
申请号：US13314738
申请日：2011-12-08
IPC分类号： G06F9/45
CPC分类号： G06F8/74 , G06F11/3604
摘要： A scalable, computer implemented method for finding subtle flaws in software programs. The method advantageously employs 1) scope bounding which limits the size of a generated model by excluding deeply-nested function calls, where the scope bounding vector is chosen non-monotonically, and 2) automatic specification inference which generates constraints for functions through the effect of a light-weight and scalable global analysis. Advantageously, scalable software model checking is achieved while at the same time finding more bugs.
摘要翻译： 一种可扩展的计算机实现的方法，用于在软件程序中发现微妙的缺陷。 该方法有利地采用1）范围界限，其通过排除深嵌套的函数调用来限制所生成的模型的大小，其中范围界限向量被非单调地选择，以及2）自动规范推理，其通过效应来产生功能的约束 轻量级和可扩展的全球分析。 有利地，实现可扩展的软件模型检查，同时发现更多的错误。
-
7.发明授权Path-sensitive analysis through infeasible-path detection and syntactic language refinement 有权通过不可行路径检测和句法语言细化进行路径敏感分析公开(公告)号：US08365152B2
公开(公告)日：2013-01-29
申请号：US12183416
申请日：2008-07-31
IPC分类号： G06F9/45
CPC分类号： G06F9/44589 , G06F11/3608
摘要： A system and method for infeasible path detection includes performing a static analysis on a program to prove a property of the program. If the property is not proved, infeasible paths in the program are determined by performing a path-insensitive abstract interpretation. Information about such infeasible paths is used to achieve the effects of path-sensitivity in path-insensitive program analysis.
摘要翻译： 用于不可行路径检测的系统和方法包括对程序执行静态分析以证明程序的属性。 如果属性未被证明，程序中的不可行路径是通过执行不区分路径的抽象解释来确定的。 关于这种不可行路径的信息用于实现路径不敏感程序分析中路径敏感性的影响。
-
8.发明授权Methods and systems for efficient analysis of hybrid systems using template polyhedra 有权使用模板多面体对混合系统进行有效分析的方法和系统公开(公告)号：US08352222B2
公开(公告)日：2013-01-08
申请号：US12236071
申请日：2008-09-23
CPC分类号： G05B15/02
摘要： In accordance with aspects of the present principles, an over-approximation of reachable states of a hybrid system may be determined by utilizing template polyhedra. Policy iteration may be utilized to obtain an over-approximation of reachable states in the form of a relaxed invariant based upon template polyhedra expressions. The relaxed invariant may be used to construct a flowpipe to refine the over-approximation and thereby determine the reachable states of the hybrid system.
摘要翻译： 根据本原理的方面，可以通过利用模板多面体来确定混合系统的可达状态的过近似。 可以利用策略迭代来基于模板多面体表达式以松弛不变量的形式获得可达状态的过近似。 可以使用松弛的不变量来构造流量管以改善过近似度，从而确定混合系统的可达状态。
-
9.发明授权System and method for dynamically inferring data preconditions over predicates by tree learning 有权通过树木学习动态推断出谓词的数据前提条件的系统和方法公开(公告)号：US08126831B2
公开(公告)日：2012-02-28
申请号：US12236102
申请日：2008-09-23
IPC分类号： G06N5/00
CPC分类号： G06N5/04
摘要： A system and method for inferring preconditions for procedures in a program includes formulating predicates based on inputs to a procedure, including formal arguments, global variables and external environment. Truth assignments are sampled to the predicates to provide truth assignments that lead to a feasible set of input values. Test cases are generated for testing the program in accordance with the truth assignments having feasible sets of input values. The truth assignments are classified to the predicates as providing an error or not providing an error.
摘要翻译： 用于推断程序中过程的前提条件的系统和方法包括根据对过程的输入（包括形式参数，全局变量和外部环境）来制定谓词。 真理分配被抽样到谓词，以提供导致一组可行的输入值的真值分配。 生成测试用例，以便根据具有可行的输入值集合的真值赋值来测试程序。 事实分配被分类为谓词提供错误或不提供错误。
-
10.发明申请公开(公告)号：US20100005454A1
公开(公告)日：2010-01-07
申请号：US12393500
申请日：2009-02-26
申请人： Sriram Sankaranarayanan , Aarti Gupta , William R. Harris , Gogul Balakrishnan , Franjo Ivancic
发明人： Sriram Sankaranarayanan , Aarti Gupta , William R. Harris , Gogul Balakrishnan , Franjo Ivancic
IPC分类号： G06F11/36
CPC分类号： G06F11/3608
摘要： Systems and methods are disclosed to verify a program by symbolically enumerating path programs; verifying each path program to determine if the path program is correct or leads to a violation of a correctness property; determining a conflict set from the path program if the path program is proved correct; using the conflict set to avoid enumerating other related path programs that are also correct.
摘要翻译： 公开了系统和方法，以通过象征性地列举路径程序来验证程序; 验证每个路径程序以确定路径程序是否正确或导致违反正确性属性; 如果路径程序被证明是正确的，则从路径程序确定冲突集; 使用冲突集来避免枚举其他相关路径程序也是正确的。
-
-
-
-
-
-
-
-
-
搜索结果
34 条记录 (耗时 0.023 秒)
