NativeMethodsRT
URL
Change Log
| When | What |
|---|---|
| November 13th, 2015 | Donated by Ben Hermann |
Reference
Studies who have been using the data (in any form) are required to include the following reference:
@inproceedings{Hermann:2015:GKY:2786805.2786829,
author = {Hermann, Ben and Reif, Michael and Eichberg, Michael and Mezini, Mira},
title = {Getting to Know You: Towards a Capability Model for Java},
booktitle = {Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering},
series = {ESEC/FSE 2015},
year = {2015},
isbn = {978-1-4503-3675-8},
location = {Bergamo, Italy},
pages = {758--769},
numpages = {12},
url = {http://doi.acm.org/10.1145/2786805.2786829},
doi = {10.1145/2786805.2786829},
acmid = {2786829},
publisher = {ACM},
address = {New York, NY, USA},
keywords = {analysis, capability, library, reuse, security},
}
About the Data
Attribute Information
1) package 2) class 3) method name 4) capabilities
Paper Abstract
Developing software from reusable libraries lets developers face a security dilemma: Either be efficient and reuse libraries as they are or inspect them, know about their resource usage, but possibly miss deadlines as reviews are a time consuming process. In this paper, we propose a novel capability inference mechanism for libraries written in Java. It uses a coarse-grained capability model for system resources that can be presented to developers. We found that the capability inference agrees by 86.81% on expectations towards capabilities that can be derived from project documentation. Moreover, our approach can find capabilities that cannot be discovered using project documentation. It is thus a helpful tool for developers mitigating the aforementioned dilemma.