一句话:博士项目拟通过代码异味、安全问题与脆弱依赖分析工具提升移动应用可维护性与安全性。
智能手机与移动应用已成为日常生活的重要部分,其代码质量中的可维护性与安全性亟待保障。该博士项目设定三项目标:研究 iOS 应用与框架中的代码异味、安全问题及其演化;借助可视化支持改进培训与教学;帮助开发者自动检测应用中脆弱库元素依赖。对应工具为 GraphifyEvolution、VisualiseEvolution 与 DependencyEvolution。其中 GraphifyEvolution 已实现并用于分析 Swift 编写的 iOS 应用中的代码异味,采用模块化架构,可扩展支持更多语言和外部分析工具。项目剩余两年将完成另外两个工具,并在工业开发者案例研究和大学教学中应用。
Smart phones and mobile apps have become an essential part of our daily lives. It is necessary to ensure the quality of these apps. Two important aspects of code quality are maintainability and security. The goals of my PhD project are (1) to study code smells, security issues and their evolution in iOS apps and frameworks, (2) to enhance training and teaching using visualisation support, and (3) to support developers in automatically detecting dependencies to vulnerable library elements in their apps. For each of the three tools, dedicated tool support will be provided, i.e., GraphifyEvolution, VisualiseEvolution, and DependencyEvolution respectively. The tool GraphifyEvolution exists and has been applied to analyse code smells in iOS apps written in Swift. The tool has a modular architecture and can be extended to add support for additional languages and external analysis tools. In the remaining two years of my PhD studies, I will complete the other two tools and apply them in case studies with developers in industry as well as in university teaching.
DOI 原文 ·
@inproceedings{paperbot6544,
title = {Quality analysis of mobile applications with special focus on security aspects},
author = {Kristiina Rahkema},
booktitle = {ASE},
year = {2021},
doi = {10.1109/ase51524.2021.9678681}
}