paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Quality analysis of mobile applications with special focus on security aspects

移动应用质量分析:特别关注安全方面
ASE 2021 36th IEEE/ACM International Conference on Automated Software Engineering (ASE)2021匹配度 3/10 · 论文关注移动应用(iOS/Swift)的代码异味、安全问题和脆弱依赖分析,属于软件工程与静态分析应用,但与用户核心方向(LLM/Agent 与静态分析交叉、浮点程序分析、贝叶斯程序分析)几乎没有直接关联。引用 1 inbox
Kristiina Rahkema
crossref: 2026-09-12

AI 速览

一句话:博士项目拟通过代码异味、安全问题与脆弱依赖分析工具提升移动应用可维护性与安全性。

智能手机与移动应用已成为日常生活的重要部分,其代码质量中的可维护性与安全性亟待保障。该博士项目设定三项目标:研究 iOS 应用与框架中的代码异味、安全问题及其演化;借助可视化支持改进培训与教学;帮助开发者自动检测应用中脆弱库元素依赖。对应工具为 GraphifyEvolution、VisualiseEvolution 与 DependencyEvolution。其中 GraphifyEvolution 已实现并用于分析 Swift 编写的 iOS 应用中的代码异味,采用模块化架构,可扩展支持更多语言和外部分析工具。项目剩余两年将完成另外两个工具,并在工业开发者案例研究和大学教学中应用。

问题
移动应用质量中的可维护性与安全性难以保障,开发者需要理解代码异味、安全问题及其演化,并及时发现应用中脆弱库依赖。
方法
面向 iOS 应用与框架构建三类工具:GraphifyEvolution 分析代码异味与安全问题的演化,VisualiseEvolution 提供可视化教学与培训支持,DependencyEvolution 自动检测脆弱库元素依赖。
评估
现有 GraphifyEvolution 已应用于分析 Swift 编写的 iOS 应用中的代码异味;后续将在工业开发者案例研究与大学教学中应用并评估其余工具。
原文摘要(Abstract)

Smart phones and mobile apps have become an essential part of our daily lives. It is necessary to ensure the quality of these apps. Two important aspects of code quality are maintainability and security. The goals of my PhD project are (1) to study code smells, security issues and their evolution in iOS apps and frameworks, (2) to enhance training and teaching using visualisation support, and (3) to support developers in automatically detecting dependencies to vulnerable library elements in their apps. For each of the three tools, dedicated tool support will be provided, i.e., GraphifyEvolution, VisualiseEvolution, and DependencyEvolution respectively. The tool GraphifyEvolution exists and has been applied to analyse code smells in iOS apps written in Swift. The tool has a modular architecture and can be extended to add support for additional languages and external analysis tools. In the remaining two years of my PhD studies, I will complete the other two tools and apply them in case studies with developers in industry as well as in university teaching.

链接与引用

DOI 原文 ·

BibTeX
@inproceedings{paperbot6544,
  title = {Quality analysis of mobile applications with special focus on security aspects},
  author = {Kristiina Rahkema},
  booktitle = {ASE},
  year = {2021},
  doi = {10.1109/ase51524.2021.9678681}
}