检索结果-南通市图书馆

Deep learning-based software engineering: progress,challenges, and opportunities

Science China(Information Sciences) 2025年第1期68卷 57-144页

作者： Xiangping CHEN Xing HU Yuan HUANG He JIANG Weixing JI Yanjie JIANG Yanyan JIANG Bo LIU Hui LIU Xiaochen LI Xiaoli LIAN guozhu meng Xin PENG Hailong SUN Lin SHI Bo WANG Chong WANG Jiayi WANG Tiantian WANG Jifeng XUAN Xin XIA Yibiao YANG Yixin YANG Li ZHANG Yuming ZHOU Lu ZHANG School of Journalism and Communication Sun Yat-sen University School of Software Technology Zhejiang University School of Software Engineering Sun Yat-sen University School of Software Dalian University of Technology School of Computer Science and Technology Beijing Institute of Technology Key Laboratory of High Confidence Software Technologies (Peking University) Ministry of EducationSchool of Computer Science Peking University State Key Laboratory for Novel Software Technology Nanjing University School of Computer Science and Engineering Beihang University Institute of Information Engineering Chinese Academy of Sciences School of Computer Science Fudan University State Key Laboratory of Complex & Critical Software Environment (CCSE) School of Software Beihang University School of Computer and Information Technology Beijing Jiaotong University School of Computer Science and Technology Harbin Institute of Technology School of Computer Science Wuhan University Huawei Technologies

Researchers have recently achieved significant advances in deep learning techniques, which in turn has substantially advanced other research disciplines, such as natural language processing, image processing, speech recognition, and software engineering. Various deep learning techniques have been successfully employed to facilitate software engineering tasks, including code generation, software refactoring, and fault localization. Many studies have also been presented in top conferences and journals, demonstrating the applications of deep learning techniques in resolving various software engineering tasks. However,although several surveys have provided overall pictures of the application of deep learning techniques in software engineering,they focus more on learning techniques, that is, what kind of deep learning techniques are employed and how deep models are trained or fine-tuned for software engineering tasks. We still lack surveys explaining the advances of subareas in software engineering driven by deep learning techniques, as well as challenges and opportunities in each subarea. To this end, in this study, we present the first task-oriented survey on deep learning-based software engineering. It covers twelve major software engineering subareas significantly impacted by deep learning techniques. Such subareas spread out through the whole lifecycle of software development and maintenance, including requirements engineering, software development, testing, maintenance, and developer collaboration. As we believe that deep learning may provide an opportunity to revolutionize the whole discipline of software engineering, providing one survey covering as many subareas as possible in software engineering can help future research push forward the frontier of deep learning-based software engineering more systematically. For each of the selected subareas,we highlight the major advances achieved by applying deep learning techniques with pointers to the available datasets i

关键词： deep learning software engineering software benchmark software artifact representation survey

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

SkillSim:voice apps similarity detection

引用

Cybersecurity 2023年第4期6卷 33-49页

作者： Zhixiu Guo Ruigang Liang guozhu meng Kai Chen SKLOIS Institute of Information EngineeringChinese Academy of SciencesBeijingChina School of Cyber Security University of Chinese Academy of SciencesBeijingChina

Virtual personal assistants(VPAs),such as Amazon Alexa and Google Assistant,are software agents designed to perform tasks or provide services to individuals in response to user *** extend their functions through third-party voice apps,thereby attracting more users to use VPA-equipped *** studies demonstrate vulnerabilities in the certification,installation,and usage of these third-party voice ***,these studies focus on individual *** the best of our knowledge,there is no prior research that explores the correlations among voice *** apps represent a new type of applications that interact with users mainly through a voice user interface instead of a graphical user interface,requiring a distinct approach to *** this study,we present a novel voice app similarity analysis approach to analyze voice apps in the market from a new *** approach,called SkillSim,detects similarities among voice apps(***)based on two dimensions:text similarity and structure *** measures 30,000 voice apps in the Amazon skill market and reveals that more than 25.9%have at least one other skill with a text similarity greater than 70%.Our analysis identifies several factors that contribute to a high number of similar skills,including the assistant development platforms and their limited ***,we observe interesting phenomena,such as developers or platforms creating multiple similar skills with different accounts for purposes such as ***,we also find that some assistant development platforms develop multiple similar but non-compliant skills,such as requesting user privacy in a non-compliance way,which poses a security *** on the similarity analysis results,we have a deeper understanding of voice apps in the mainstream market.

关键词： Voice app Similarity analysis Skills

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

The inconsistency of documentation:a study of online C standard library documents

引用

Cybersecurity 2022年第4期5卷 117-131页

作者： Ruishi Li Yunfei Yang Jinghua Liu Peiwei Hu guozhu meng KLois Institute oflnformation EngineeringChinese Academy of SciencesBejingChina School of Cyber Security University of Chinese Academy of SciencesBeijingChina.

The C standard libraries are basic function libraries standardized by the C *** usually refer to their APl documentation provided by third-party ***,these documents are not necessarily complete or accurate,especially for constraint sentences of APl usage,which are called Security Specifications(SSs).SS issues can prevent programmers from following obligatory constraints,which results in APl misuse *** work studying SS issues could only find certain types of inaccurate SSs through checking the compliance between APl usage and existing ***,we propose a novel approach SSeeker for quickly discovering missing and inaccurate SSs through the inconsistency of semantically similar *** specifically,SSeeker first completes broken sentences and discovers SSs from them by judging their constraint *** SSeeker puts semantically similar SSs from different sources into a group,which can be used to discover missing or inaccurate *** the help of SSeeker,we investigated 4 popular online third-party C standard library documents,studied their conformity with the C99 standard,analyzed their APls and SSs,and discovered 92 prototype issues,15 web page issues,and 96 SS issues.

关键词： Documentation issues Security specification Standard library

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Are our clone detectors good enough?An empirical study of code effects by obfuscation

引用

Cybersecurity 2023年第4期6卷 163-181页

作者： Weihao Huang guozhu meng Chaoyang Lin Qiucun Yan Kai Chen Zhuo Ma SKLOIS Institute of Information EngineeringChinese Academy of SciencesBeijingChina School of Cyber Security University of Chinese Academy of SciencesBeijingChina Xidian University Xi’anChina

Clone detection has received much attention in many fields such as malicious code detection,vulnerability hunting,and code copyright infringement ***,cyber criminals may obfuscate code to impede violation *** date,few studies have investigated the robustness of clone detectors,especially in-fashion deep learning-based ones,against ***,most of these studies only measure the difference between one code snippet and its obfuscation ***,in reality,the attackers may modify the original code before obfuscating *** what we should evaluate is the detection of obfuscated code from cloned code,not the original *** this,we conduct a comprehensive study evaluating 3 popular deep-learning based clone detectors and 6 commonly used traditional *** the data,we collect 6512 clone pairs of five types from the dataset BigCloneBench and obfuscate one program of each pair via 64 strategies of 6 state-of-art commercial *** also collect 1424 non-clone pairs to evaluate the false *** sum,a benchmark of 524,148 code pairs(either clone or not)are generated,which are passed to clone detectors for *** automate the evaluation,we develop one uniform evaluation framework,integrating the clone detectors and *** results bring us interesting findings on how obfuscation affects the performance of clone detection and what is the difference between traditional and deep learning-based clone *** addition,we conduct manual code reviews to uncover the root cause of the phenomenon and give suggestions to users from different perspectives.

关键词： Clone detection Obfuscation Evaluation

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

DroidEcho:an in-depth dissection of malicious behaviors in Android applications

引用

Cybersecurity 2018年第1期1卷 126-142页

作者： guozhu meng Ruitao Feng Guangdong Bai Kai Chen Yang Liu SKLOIS Institute of Information EngineeringChinese Academy of SciencesBeijingChina Nanyang Technological University SingaporeSingapore Singapore Institute of Technology SingaporeSingapore School of Cyber Security University of Chinese Academy of SciencesBeijingChina

A precise representation for attacks can benefit the detection of malware in both accuracy and ***,it is still far from expectation to describe attacks precisely on the Android *** addition,new features on Android,such as communication mechanisms,introduce new challenges and difficulties for attack *** this paper,we propose abstract attack models to precisely capture the semantics of various Android attacks,which include the corresponding targets,involved behaviors as well as their execution ***,we construct a novel graph-based model called the inter-component communication graph(ICCG)to describe the internal control flows and inter-component communications of *** models take into account more communication channel with a maximized preservation of their program *** the guidance of the attack models,we propose a static searching approach to detect attacks hidden in *** reduce false positive rate,we introduce an additional dynamic confirmation step to check whether the detected attacks are false *** show that DROIDECHO can detect attacks in both benchmark and real-world applications effectively and efficiently with a precision of 89.5%.

关键词： Semantic attack model Android malware detection Inter-component communication graph Privacy leakage

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

机器学习系统的隐私和安全问题综述

引用

计算机研究与发展 2019年第10期56卷 2049-2070页

作者：何英哲胡兴波何锦雯孟国柱陈恺信息安全国家重点实验室(中国科学院信息工程研究所) 北京100195 中国科学院信息工程研究所北京100195 中国科学院大学网络空间安全学院北京101408

人工智能已经渗透到生活的各个角落,给人类带来了极大的便利.尤其是近年来,随着机器学习中深度学习这一分支的蓬勃发展,生活中的相关应用越来越多.不幸的是,机器学习系统也面临着许多安全隐患,而机器学习系统的普及更进一步放大了这些风... 详细信息

人工智能已经渗透到生活的各个角落,给人类带来了极大的便利.尤其是近年来,随着机器学习中深度学习这一分支的蓬勃发展,生活中的相关应用越来越多.不幸的是,机器学习系统也面临着许多安全隐患,而机器学习系统的普及更进一步放大了这些风险.为了揭示这些安全隐患并实现一个强大的机器学习系统,对主流的深度学习系统进行了调查.首先设计了一个剖析深度学习系统的分析模型,并界定了调查范围.调查的深度学习系统跨越了4个领域——图像分类、音频语音识别、恶意软件检测和自然语言处理,提取了对应4种类型的安全隐患,并从复杂性、攻击成功率和破坏等多个维度对其进行了表征和度量.随后,调研了针对深度学习系统的防御技术及其特点.最后通过对这些系统的观察,提出了构建健壮的深度学习系统的建议.

关键词：机器学习安全深度学习安全攻防竞赛对抗攻击成员推理攻击隐私保护

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Insight into the adsorption behavior and mechanism of trace impurities from H_(2)O_(2) solution on functionalized zirconia by tuning the structure of amino groups

引用

Frontiers of Chemical Science and Engineering 2024年第5期18卷 83-94页

作者： Yu meng Yitong Wang guozhu Li guozhu Liu Li Wang Key Laboratory for Green Chemical Technology of Ministry Education School of Chemical Engineering and TechnologyTianjin UniversityTianjin 300072China Haihe Laboratory of Sustainable Chemical Transformations Tianjin 300192China

Primary,secondary and tertiary amino-functionalized zirconia(ZrO_(2)-NH_(2),ZrO_(2)-NH and ZrO_(2)-N)was synthesized by the postgrafting method for the adsorption removal of typical metallic ions,phosphate and total oxidizable carbon from a real H_(2)O_(2) ***_(2)-NH_(2),ZrO_(2)-NH and ZrO_(2)-N exhibited similar pore sizes and sequentially increased zeta *** adsorption results of single and binary simulated solutions showed that the removal efficiency increased in the order of Fe^(3+)>Al^(3+)>Ca^(2+)>Na^(+).There is competitive adsorption between metallic ions,and Fe^(3+) has an advantage over the other metals,with a removal efficiency of 90.7%.The coexisting phosphate could promote the adsorption of metallic ions,while total oxidizable carbon had no effect on *** adsorption results of the real H_(2)O_(2)solution showed that ZrO_(2)-NH_(2) exhibited the best adsorption affinity for metallic ions,as did phosphate and total oxidizable carbon,with a total adsorption capacity of 120.9 mg·g_(-1).Density functional theory calculations revealed that the adsorption process of metallic ions involves electron transfer from N atoms to metals and the formation of N-metal bonds.

关键词： adsorption metallic ion phosphate total oxidizable carbon zirconia H_(2)O_(2)

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

基于联邦学习的第三方库流量识别

引用

信息安全学报 2023年第3期8卷 128-145页

作者：崔华俊孟国柱李玥琦张棪代玥玥杨慧然朱大立王伟平中国科学院信息工程研究所北京100093 中国科学院大学网络空间安全学院北京100049 华中科技大学网络空间安全学院湖北430074

第三方库(Third-party Library, TPL)已经成为移动应用开发的重要组成部分,开发者通常在应用中集成TPL以实现诸如广告、消息推送、移动支付等特定功能,从而提高开发效率并降低研发成本。然而,由于TPL与其所在的移动应用(宿主应用)共享... 详细信息

第三方库(Third-party Library, TPL)已经成为移动应用开发的重要组成部分,开发者通常在应用中集成TPL以实现诸如广告、消息推送、移动支付等特定功能,从而提高开发效率并降低研发成本。然而,由于TPL与其所在的移动应用(宿主应用)共享相同的系统权限,且开发者对TPL自身的安全隐患缺乏了解,导致近年来由TPL引起的安全问题频发,给公众造成了严重的信息与隐私安全困扰。TPL的流量识别对于精细化流量管理与安全威胁检测具有重要意义,是支撑对宿主应用与TPL之间进行安全责任判定的重要能力,同时也是促进TPL安全合规发展的重要检测方法。然而目前关于TPL的研究主要集中于TPL检测、TPL引起的隐私泄漏问题等,关于TPL流量识别的研究十分少见。为此,本文提出并实现了一种用于TPL流量识别的框架——LibCapture,该框架首先基于动态插桩技术与TPL检测技术设计了自动生成TPL加密流量数据集的方法。其次,针对隐私保护以及数据共享的问题,构建了基于卷积神经网络的联邦学习模型,用于识别TPL流量。最后,通过对2327个真实应用的流量测试证明了本文所提框架具有较高的流量识别准确率。此外,本文分析了联邦学习参与方本地样本数据差异性给全局模型聚合带来的具体影响,指出了不同场景下的进一步研究方向。

关键词：加密流量识别第三方库联邦学习动态插桩

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Con A-Sepharose 4B亲和层析柱的制备

引用

化学试剂 1986年第1期 54-56页

作者：王亦根沈国柱孟泽 81医院生化科 121医院检验科南京军区总医院生化科

伴刀豆素球蛋白A(Concanavalin A,简称Con A)是从巨豆(Jack bean, Canavalia ensiformis)、稻、豆、麦等谷类植物种子中分离出来的一种植物血凝素,能与含有a-D-吡喃甘露糖基、a-D-吡喃葡萄糖基以及与其空间位置相关的分子基团相结合。... 详细信息

伴刀豆素球蛋白A(Concanavalin A,简称Con A)是从巨豆(Jack bean, Canavalia ensiformis)、稻、豆、麦等谷类植物种子中分离出来的一种植物血凝素,能与含有a-D-吡喃甘露糖基、a-D-吡喃葡萄糖基以及与其空间位置相关的分子基团相结合。糖类分子中与Con A结合的位置,主要在C-3、C-4及C-6的羟基部分。Con A与D-吡喃甘露糖的结合比与D-吡喃葡萄糖要强些。 Con A-Sepharose 4 B的应用范围甚广,

关键词：亲和层析柱 Sepharose 吡喃甘露糖刀豆素甘露糖基 ConA 植物血凝素植物种子 sepharose 结合物

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Dynamic coefficients and stability analysis of a water-lubricated hydrostatic bearing by solving the uncoupled Reynolds equation

引用

Chinese Journal of Aeronautics 2020年第8期33卷 2110-2122页

作者： Jialei DU guozhu LIANG School of Astronautics Beihang UniversityBeijing 100083China

This paper concerns the dynamic characteristics of incompressible laminar flow hydrostatic bearings. An improved method based on the mathematical perturbation technique for calculating the stiffness and damping coefficients of hydrostatic bearings is presented;it raises the calculation efficiency by uncoupling the recess flow continuity equations from the solving of the Reynolds equation. The dynamic coefficients of a water-lubricated four-recess hydrostatic bearing are calculated with both the improved method and the conventional method. The comparisons between these two methods validate the effectiveness and correctness of the improved method. Furthermore, the dynamic response and stability characteristics of a rotor supported by the hydrostatic bearing are calculated and compared with experimental results. First, the dynamic responses calculated with the linear and nonlinear bearing dynamic coefficients models show that the linear model is inaccurate if the rotor whirls in a large eccentricity ratio range, owing to the nonlinearity of stiffness and damping. Second, according to the numerical and experimental results, the nonlinearity of bearing stiffness and damping coefficients could induce double rotational frequency component in the unbalance response frequency spectrum. Finally, the numerical results indicate that the stability threshold speed of the bearing increases with eccentricity ratio. The improved method proposed can be used to evaluate the dynamic performance of hydrostatic bearings efficiently, and the bearing characteristics presented could contribute to a better understanding of the performance of waterlubricated hydrostatic bearings.

关键词： Damping Hydrostatic bearing Laminar flow Stability Stiffness Water lubrication

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：