SHF: Small: Preponderance of the Evidence for Behavioral Code Similarities

SHF：小：行为准则相似性的证据占优势

基本信息

批准号：
1815494
负责人：
Gail Kaiser
金额：
$ 49.66万
依托单位：
Columbia University
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2018
资助国家：
美国
起止时间：
2018-10-01 至 2022-09-30
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1815494&HistoricalAwards=false
关键词：
SHF Small Preponderance Evidence Behavioral

项目摘要

Code clones are often produced when a software engineer reuses existing software and then tailors it to a new context. A large system may contain a lot of clones that were created from reused software or else from software maintenance where code was modified to fix bugs or adapt to changing requirements. The ability to detect code clones is fundamental to software development, maintenance and evolution. The ability to analyze software retrospectively to find same or similar code is very important to software quality and productivity. Clone detection has been an active area of research for many years. However, clones were considered same/similar if they had same/similar syntax. This project breaks new ground by detecting semantically similar clones, which may be consider same/similar even if they look different, i.e. have different syntax. To be semantically equivalent, clones need to have the same behaviors, which is to say they produce the same execution paths from the same inputs.This project investigates dynamic analysis approaches to identifying behavioral similarities among code elements in the same or different programs, particularly for code that behaves similarly during execution but does not look similar so would be difficult or impossible to detect using static analysis (code clones). While code clone technology is fairly mature, tools for detecting behavioral similarities are relatively primitive. The primary objective is to improve and shape behavioral similarity analysis for practical use cases, concentrating on finding similar code in the same or other codebases that might help developers understand, debug, and add features to unfamiliar code they are tasked to work with. The project seeks to advance knowledge about what it means for code to be behaviorally similar, how dynamic analyses can identify behavioral code similarities, how to drive the executions necessary for these analyses, and how to leverage code whose behavior is reported as highly similar to the code at hand to achieve common software engineering tasks that may be ill-suited to representational code similarities (code clones). The research investigates the utility and scalability of dynamic analyses seeking behavioral similarities in corresponding representations of code executions; guiding input case generation techniques to produce test executions useful for comparing/contrasting code behaviors for particular use cases; and filtering and weighting schemes for adapting the preponderance of the evidence metaphor to choosing the most convincing similarities for the software engineering task.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

当软件工程师重用现有软件，然后将其定制以适应新的环境时，通常会产生代码克隆。大型系统可能包含许多克隆，这些克隆是从重用软件创建的，或者是从软件维护中创建的，其中代码被修改以修复错误或适应不断变化的需求。检测代码克隆的能力是软件开发、维护和发展的基础。回顾性分析软件以查找相同或相似代码的能力对于软件质量和生产力非常重要。多年来，克隆检测一直是一个活跃的研究领域。但是，如果克隆具有相同/相似的语法，则它们被视为相同/相似。该项目通过检测语义相似的克隆开辟了新天地，即使它们看起来不同，即具有不同的语法，也可能被认为是相同/相似的。为了在语义上等效，克隆需要具有相同的行为，也就是说，它们从相同的输入产生相同的执行路径。该项目研究动态分析方法来识别相同或不同程序中的代码元素之间的行为相似性，特别是对于在执行期间行为相似但看起来不相似的代码将很难或不可能使用静态分析（代码克隆）进行检测。虽然代码克隆技术相当成熟，但检测行为相似性的工具相对原始。主要目标是改进和塑造实际用例的行为相似性分析，专注于在相同或其他代码库中查找相似的代码，这可能有助于开发人员理解、调试并向他们负责处理的不熟悉的代码添加功能。该项目旨在增进对代码行为相似意味着什么、动态分析如何识别行为代码相似性、如何驱动这些分析所需的执行以及如何利用行为与行为高度相似的代码的了解。手头的代码来实现可能不适合代表性代码相似性（代码克隆）的常见软件工程任务。该研究调查了动态分析的实用性和可扩展性，以在代码执行的相应表示中寻求行为相似性；指导输入案例生成技术来生成可用于比较/对比特定用例的代码行为的测试执行；过滤和加权方案，以适应证据隐喻的优势，为软件工程任务选择最令人信服的相似性。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。