Change Log

When What
November 13th, 2015 Donated by Ben Hermann


Studies who have been using the data (in any form) are required to include the following reference:

 author = {Hermann, Ben and Reif, Michael and Eichberg, Michael and Mezini, Mira},
 title = {Getting to Know You: Towards a Capability Model for Java},
 booktitle = {Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering},
 series = {ESEC/FSE 2015},
 year = {2015},
 isbn = {978-1-4503-3675-8},
 location = {Bergamo, Italy},
 pages = {758--769},
 numpages = {12},
 url = {},
 doi = {10.1145/2786805.2786829},
 acmid = {2786829},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {analysis, capability, library, reuse, security},

About the Data

Attribute Information

1) package 2) class 3) method name 4) capabilities

Paper Abstract

Developing software from reusable libraries lets developers face a security dilemma: Either be efficient and reuse libraries as they are or inspect them, know about their resource usage, but possibly miss deadlines as reviews are a time consuming process. In this paper, we propose a novel capability inference mechanism for libraries written in Java. It uses a coarse-grained capability model for system resources that can be presented to developers. We found that the capability inference agrees by 86.81% on expectations towards capabilities that can be derived from project documentation. Moreover, our approach can find capabilities that cannot be discovered using project documentation. It is thus a helpful tool for developers mitigating the aforementioned dilemma.