专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08656496B2 Global variable security analysis 失效
标题翻译：全局变量安全性分析
公开(公告)号：US08656496B2
公开(公告)日：2014-02-18
申请号：US12951435
申请日：2010-11-22
申请人： Shay Artzi , Ryan Berg , John Peyton , Marco Pistoia , Manu Sridharan , Takaaki Tateishi , Omer Tripp , Robert Wiener
发明人： Shay Artzi , Ryan Berg , John Peyton , Marco Pistoia , Manu Sridharan , Takaaki Tateishi , Omer Tripp , Robert Wiener
IPC分类号： G06F11/07 , G06F9/455
CPC分类号： G06F21/577 , G06F21/00 , G06F2221/034
摘要： A method includes determining selected global variables in a program for which flow of the selected global variables through the program is to be tracked. The selected global variables are less than all the global variables in the program. The method includes using a static analysis performed on the program, tracking flow through the program for the selected global variables. In response to one or more of the selected global variables being used in security-sensitive operations in the flow, use is analyzed of each one of the selected global variables in a corresponding security-sensitive operation. In response to a determination the use may be a potential security violation, the potential security violation is reported. Apparatus and computer program products are also disclosed.
摘要翻译：一种方法包括确定在所述程序中选择的全局变量，通过所述程序，所选择的全局变量的流程将被跟踪。所选的全局变量小于程序中的所有全局变量。该方法包括使用对程序执行的静态分析，跟踪所选择的全局变量的程序流程。响应于在流中的安全敏感操作中使用的一个或多个所选择的全局变量，在相应的安全敏感操作中对所选择的全局变量中的每一个进行分析。为了回应确定，使用可能是潜在的安全违规，报告潜在的安全违规。还公开了装置和计算机程序产品。

2. 发明申请

US20120254839A1 SIMULATING BLACK BOX TEST RESULTS USING INFORMATION FROM WHITE BOX TESTING 有权
标题翻译：使用白盒测试中的信息模拟黑盒测试结果
公开(公告)号：US20120254839A1
公开(公告)日：2012-10-04
申请号：US13493067
申请日：2012-06-11
申请人： Stephen Fink , Yinnon A. Haviv , Roee Hay , Marco Pistoia , Ory Segal , Adi Sharabani , Manu Sridharan , Frank Tip , Omer Tripp , Omri Weisman
发明人： Stephen Fink , Yinnon A. Haviv , Roee Hay , Marco Pistoia , Ory Segal , Adi Sharabani , Manu Sridharan , Frank Tip , Omer Tripp , Omri Weisman
IPC分类号： G06F9/44
CPC分类号： G06F11/3604 , G06F9/44589 , G06F9/455 , G06F11/36 , G06F11/362 , G06F21/577 , G06F2221/033
摘要： Systems, methods are program products for simulating black box test results using information obtained from white box testing, including analyzing computer software (e.g., an application) to identify a potential vulnerability within the computer software application and a plurality of milestones associated with the potential vulnerability, where each of the milestones indicates a location within the computer software application, tracing a path from a first one of the milestones to an entry point into the computer software application, identifying an input to the entry point that would result in a control flow from the entry point and through each of the milestones, describing the potential vulnerability in a description indicating the entry point and the input, and presenting the description via a computer-controlled output medium.
摘要翻译：系统，方法是使用从白盒测试获得的信息来模拟黑盒测试结果的程序产品，包括分析计算机软件（例如应用程序）以识别计算机软件应用程序中的潜在漏洞以及与潜在漏洞相关联的多个里程碑，其中每个里程碑指示计算机软件应用程序内的位置，跟踪从第一个里程碑到入口点的路径到计算机软件应用程序中，识别入口点的输入将导致控制流从描述在描述入口点和输入的描述中的潜在漏洞，以及经由计算机控制的输出介质呈现描述的入口点和通过每个里程碑。

3. 发明授权

US07516446B2 Method and apparatus for efficient and precise datarace detection for multithreaded object-oriented programs 失效
标题翻译：用于多线程面向对象程序的高效精确数据采集检测方法和装置
公开(公告)号：US07516446B2
公开(公告)日：2009-04-07
申请号：US10178561
申请日：2002-06-25
申请人： Jong-Deok Choi , Keunwoo Lee , Robert W. O'Callahan , Vivek Sarkar , Manu Sridharan
发明人： Jong-Deok Choi , Keunwoo Lee , Robert W. O'Callahan , Vivek Sarkar , Manu Sridharan
IPC分类号： G06F9/44
CPC分类号： G06F9/52 , G06F11/3632
摘要： A method of detecting a datarace between first and second memory accesses within a program, including: determining whether the first and second memory accesses are to the same memory location; determining whether the first and second memory accesses are executed by different threads in the program; determining whether the first and second memory accesses are guarded by a common synchronization object; and determining whether there is an execution ordering enforced between the first and second memory accesses.
摘要翻译：一种检测程序内的第一和第二存储器访问之间的数据段的方法，包括：确定所述第一和第二存储器访问是否是相同的存储器位置; 确定所述第一和第二存储器访问是否由所述程序中的不同线程执行; 确定所述第一和第二存储器访问是否被公共同步对象保护; 以及确定是否存在在所述第一和第二存储器访问之间执行的执行排序。

4. 发明授权

US09720798B2 Simulating black box test results using information from white box testing 有权
公开(公告)号：US09720798B2
公开(公告)日：2017-08-01
申请号：US13493067
申请日：2012-06-11
申请人： Stephen Fink , Yinnon A. Haviv , Roee Hay , Marco Pistoia , Ory Segal , Adi Sharabani , Manu Sridharan , Frank Tip , Omer Tripp , Omri Weisman
发明人： Stephen Fink , Yinnon A. Haviv , Roee Hay , Marco Pistoia , Ory Segal , Adi Sharabani , Manu Sridharan , Frank Tip , Omer Tripp , Omri Weisman
IPC分类号： G06F9/44 , G06F9/45 , G06F11/36 , G06F9/445 , G06F9/455 , G06F21/57
CPC分类号： G06F11/3604 , G06F9/44589 , G06F9/455 , G06F11/36 , G06F11/362 , G06F21/577 , G06F2221/033
摘要： Systems, methods are program products for simulating black box test results using information obtained from white box testing, including analyzing computer software (e.g., an application) to identify a potential vulnerability within the computer software application and a plurality of milestones associated with the potential vulnerability, where each of the milestones indicates a location within the computer software application, tracing a path from a first one of the milestones to an entry point into the computer software application, identifying an input to the entry point that would result in a control flow from the entry point and through each of the milestones, describing the potential vulnerability in a description indicating the entry point and the input, and presenting the description via a computer-controlled output medium.

5. 发明授权

US08903702B2 Generating specifications for expression language expressions and tag libraries 有权
标题翻译：生成表达式语言表达式和标签库的规范
公开(公告)号：US08903702B2
公开(公告)日：2014-12-02
申请号：US13222612
申请日：2011-08-31
申请人： Shay Artzi , Manu Sridharan
发明人： Shay Artzi , Manu Sridharan
IPC分类号： G06F9/45 , G06F9/44 , G06F17/30
CPC分类号： G06F17/30 , G06F8/75
摘要： Systems and methods are provided for creating a data structure associated with a software application that is based on at least one framework. According to the method, at least one Java Server Page file associated with the software application is analyzed. The Java Server Page (JSP) file includes at least one call to at least one library tag, and at least one Expression Language (EL) expression. A set of tag library usage information for the JSP file is generated based. The set of tag library usage information includes at least one variable, and a value of the at least one variable created by the at least one call. The EL expression is evaluated based on the variable and the value of the variable. A data structure is created for a static analysis engine based on EL expression. The data structure includes at least one Java expression representing the EL expression.
摘要翻译：系统和方法被提供用于创建与基于至少一个框架的软件应用相关联的数据结构。根据该方法，分析与软件应用程序相关联的至少一个Java服务器页面文件。 Java服务器页面（JSP）文件至少包含一个对至少一个库标签的调用，以及至少一个表达式语言（EL）表达式。基于JSP文件生成一组标签库使用信息。所述标签库使用信息集合包括至少一个变量和由所述至少一个呼叫创建的所述至少一个变量的值。基于变量和变量的值来评估EL表达式。基于EL表达式为静态分析引擎创建数据结构。数据结构包括至少一个表达EL表达式的Java表达式。

6. 发明授权

US08689191B2 Correct refactoring of concurrent software 失效
标题翻译：正确重构并发软件
公开(公告)号：US08689191B2
公开(公告)日：2014-04-01
申请号：US12718648
申请日：2010-03-05
申请人： Julian Dolby , Max Schaefer , Manu Sridharan , Frank Tip , Emina Torlak
发明人： Julian Dolby , Max Schaefer , Manu Sridharan , Frank Tip , Emina Torlak
IPC分类号： G06F9/45
摘要： Automated refactorings as implemented in modern IDEs for Java usually make no special provisions for concurrent code. Thus, refactored programs may exhibit unexpected new concurrent behaviors. We analyze the types of such behavioral changes caused by current refactoring engines and develop techniques to make them behavior-preserving, ranging from simple techniques to deal with concurrency-related language constructs to a framework that computes and tracks synchronization dependencies. By basing our development directly on the Java Memory Model we can state and prove precise correctness results about refactoring concurrent programs. We show that a broad range of refactorings are not influenced by concurrency at all, whereas other important refactorings can be made behavior-preserving for correctly synchronized programs by using our framework. Experience with a prototype implementation shows that our techniques are easy to implement and require only minimal changes to existing refactoring engines.
摘要翻译：在Java的现代IDE中实现的自动重组通常对并发代码没有特别规定。因此，重构的程序可能会出现意想不到的新并发行为。我们分析由当前重构引擎引起的这种行为变化的类型，并开发技术以使其保持行为，从简单技术到处理与并发相关的语言结构到计算和跟踪同步依赖关系的框架。通过将我们的开发直接基于Java内存模型，我们可以声明并证明重构并发程序的精确的正确性结果。我们表明，广泛的重构不受并发影响，而其他重要的重构可以通过使用我们的框架来进行正确同步的程序的行为保留。使用原型实现的经验表明，我们的技术易于实现，并且只需要对现有重构引擎进行最小的更改。

7. 发明申请

US20130290786A1 AUTOMATED TESTING OF APPLICATIONS WITH SCRIPTING CODE 有权
标题翻译：自动测试应用与脚本代码
公开(公告)号：US20130290786A1
公开(公告)日：2013-10-31
申请号：US13457083
申请日：2012-04-26
申请人： Shay ARTZI , Julian DOLBY , Salvatore A. GUARNIERI , Simon H. JENSEN , Marco PISTOIA , Manu SRIDHARAN , Frank TIP , Omer TRIPP
发明人： Shay ARTZI , Julian DOLBY , Salvatore A. GUARNIERI , Simon H. JENSEN , Marco PISTOIA , Manu SRIDHARAN , Frank TIP , Omer TRIPP
IPC分类号： G06F11/36
CPC分类号： G06F11/3676 , G06F11/3466 , G06F11/3684 , G06F11/3688
摘要： A novel system, computer program product, and method are disclosed for feedback-directed automated test generation for programs, such as JavaScript, in which execution is monitored to collect information that directs the test generator towards inputs that yield increased coverage. Several instantiations of the framework are implemented, corresponding to variations on feedback-directed random testing, in a tool called Artemis.
摘要翻译：公开了一种新颖的系统，计算机程序产品和方法用于诸如JavaScript的程序的反馈定向的自动测试生成，其中执行被监视以收集将测试发生器引导到产生增加的覆盖的输入的信息。在一个名为Artemis的工具中，实现了框架的几个实例，对应于反馈导向随机测试的变化。

8. 发明申请

US20130275951A1 RACE DETECTION FOR WEB APPLICATIONS 审中-公开
标题翻译： WEB应用程序检测
公开(公告)号：US20130275951A1
公开(公告)日：2013-10-17
申请号：US13447814
申请日：2012-04-16
申请人： Julian Dolby , Boris Petrov , Manu Sridharan , Martin Vechev
发明人： Julian Dolby , Boris Petrov , Manu Sridharan , Martin Vechev
IPC分类号： G06F9/44
CPC分类号： G06F11/366
摘要： A method of executing a rendering engine including executing a web application including at least two operations a single thread of execution, generating an auxiliary map for instrumentation accesses of the web application, and detecting and reporting concurrent memory accesses of the web application as a race.
摘要翻译：一种执行呈现引擎的方法，包括执行包括执行单个线程的至少两个操作的web应用程序，生成用于web应用程序的访问的辅助映射，以及检测并报告作为比赛的web应用程序的并发存储器访问。

9. 发明申请

US20130091487A1 SCALABLE PROPERTY-SENSITIVE POINTS-TO ANALYSIS FOR PROGRAM CODE 失效
标题翻译：可扩展的属性敏感点 - 程序代码的分析
公开(公告)号：US20130091487A1
公开(公告)日：2013-04-11
申请号：US13253521
申请日：2011-10-05
申请人： Satish CHANDRA , Julian DOLBY , Manu SRIDHARAN , Frank TIP
发明人： Satish CHANDRA , Julian DOLBY , Manu SRIDHARAN , Frank TIP
IPC分类号： G06F9/44
CPC分类号： G06F8/72 , G06F8/443 , G06F21/563
摘要： A novel system, computer program product, and method are disclosed for transforming a program to facilitate points-to analysis. The method begins with accessing at least a portion of program code, such as JavaScript. In one example, a method with at least one dynamic property correlation is identified for extraction. When a method m is identified for extraction with the dynamic property correlation, a body of the loop l in the method m is extracted. A new method mp is created to include the body of the loop l with the variable i as a parameter. The loop l is substituted in the program code of the method m with the new method mp to create a transformed program code.
摘要翻译：公开了一种新颖的系统，计算机程序产品和方法，用于转换程序以促进点分析。该方法开始于访问程序代码的至少一部分，例如JavaScript。在一个示例中，识别具有至少一个动态属性相关性的方法用于提取。当用动态属性相关性来识别用于提取的方法m时，提取方法m中的循环体l。创建一个新的方法mp以包含循环l的主体，变量i作为参数。循环l在方法m的程序代码中用新方法mp代替以创建转换的程序代码。

10. 发明申请

US20130054221A1 GENERATING SPECIFICATIONS FOR EXPRESSION LANGUAGE EXPRESSIONS AND TAG LIBRARIES 有权
标题翻译：表达语言表达和标签图书馆的生成规范
公开(公告)号：US20130054221A1
公开(公告)日：2013-02-28
申请号：US13222612
申请日：2011-08-31
申请人： Shay ARTZI , Manu Sridharan
发明人： Shay ARTZI , Manu Sridharan
IPC分类号： G06F9/45 , G06F17/30
CPC分类号： G06F17/30 , G06F8/75
摘要： Systems and methods are provided for creating a data structure associated with a software application that is based on at least one framework. According to the method, at least one Java Server Page file associated with the software application is analyzed. The Java Server Page (JSP) file includes at least one call to at least one library tag, and at least one Expression Language (EL) expression. A set of tag library usage information for the JSP file is generated based. The set of tag library usage information includes at least one variable, and a value of the at least one variable created by the at least one call. The EL expression is evaluated based on the variable and the value of the variable. A data structure is created for a static analysis engine based on EL expression. The data structure includes at least one Java expression representing the EL expression.
摘要翻译：系统和方法被提供用于创建与基于至少一个框架的软件应用相关联的数据结构。根据该方法，分析与软件应用程序相关联的至少一个Java服务器页面文件。 Java服务器页面（JSP）文件至少包含一个对至少一个库标签的调用，以及至少一个表达式语言（EL）表达式。基于JSP文件生成一组标签库使用信息。所述标签库使用信息集合包括至少一个变量和由所述至少一个呼叫创建的所述至少一个变量的值。基于变量和变量的值来评估EL表达式。基于EL表达式为静态分析引擎创建数据结构。数据结构包括至少一个表达EL表达式的Java表达式。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式