Search research articles

ABOUT JoVE

Overview Leadership Blog JoVE Help Center

AUTHORS

Publishing Process Editorial Board Scope & Policies Peer Review FAQ Submit

LIBRARIANS

Testimonials Subscriptions Access Resources Library Advisory Board FAQ

RESEARCH

JoVE Journal Methods Collections JoVE Encyclopedia of Experiments Archive

EDUCATION

JoVE Core JoVE Business JoVE Science Education JoVE Lab Manual Faculty Resource Center Faculty Site

Terms & Conditions of Use

Related Concept Videos

Quality Assurance

Quality Assurance

Quality assurance is the overarching term used to describe the activities employed to ensure the proper performance of a system. These activities can be classified into three categories: quality control, quality assessment, and internal corrective measures. Typically, these activities work cyclically: quality control is performed before and during the analysis, while quality assessment occurs during and after the investigation. Internal corrective measures are implemented based on the findings...

Non-destructive Tests for Concrete Strength

Non-destructive Tests for Concrete Strength

The rebound hammer test, also known as the Schmidt hammer test, is a non-destructive technique for evaluating the hardness of concrete and, indirectly, the strength of concrete. It operates on the principle that the rebound of a spring-driven mass from a concrete surface correlates to the surface's hardness. The device comprises a mass within a tubular housing, a spring mechanism, and a plunger that strikes the concrete. Upon release, the energy imparted to the mass by the spring causes it...

Multiple Comparison Tests

Multiple Comparison Tests

Multiple comparison test, abbreviated as MCT, is a post hoc analysis generally performed after comparing multiple samples with one or more tests. An MCT will help identify a significantly different sample among multiple samples or a factor among multiple factors.
It would be easy to compare two samples using a significance alpha level of 0.05. In other words, there is only one sample pair to be compared. However, it would be difficult to identify a significantly different sample if the number...

Statgraphics

Statgraphics

Statgraphics is a comprehensive statistical software suite designed for both basic and advanced data analysis. Originating in 1980 at Princeton University under Dr. Neil W. Polhemus, it was one of the pioneering tools for statistical computing on personal computers, with its public release in 1982 marking an early milestone in data science software. Over the years, it has evolved into a robust platform for data science, offering tools for regression analysis, ANOVA, multivariate statistics,...

Wald-Wolfowitz Runs Test I

Wald-Wolfowitz Runs Test I

The Wald-Wolfowitz test, also known as the runs test, is a nonparametric statistical test used to assess the randomness of a sequence of two different types of elements (e.g., positive/negative values, successes/failures). It examines whether the order of the elements in a sequence is random or if there is a pattern or trend present. This nonparametric test applies to any ordered data despite the population and sample data distribution, even if a higher sample size is available.
The test works...

Guidelines and Strategies for Safe Computer Charting

Guidelines and Strategies for Safe Computer Charting

The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:

You might also read

Related Articles

Articles linked to this work by shared authors, journal, and citation graph.

Sort by

Same author

Image Forensics in the Encrypted Domain.

Entropy (Basel, Switzerland)·2024

Same author

MTS-Stega: Linguistic Steganography Based on Multi-Time-Step.

Entropy (Basel, Switzerland)·2022

Same author

Wet Paper Coding-Based Deep Neural Network Watermarking.

Sensors (Basel, Switzerland)·2022

Same author

[Treatment and prognosis of stage IV alveolar soft part sarcoma].

Zhonghua zhong liu za zhi [Chinese journal of oncology]·2013

Same author

[R954 mutations in KIF21A gene in Chinese patients with congenital fibrosis of extraocular muscles].

[Zhonghua yan ke za zhi] Chinese journal of ophthalmology·2013

Same author

Comparative molecular dynamics study of human islet amyloid polypeptide (IAPP) and rat IAPP oligomers.

Biochemistry·2013

Same journal

Research on a Regional Availability Evaluation Model for Road-Area High-Entropy Energy Based on Synergy Factors.

Entropy (Basel, Switzerland)·2026

Same journal

Atmospheric Turbulence Channel Modeling and Performance Analysis of a CO-ZP-OFDM Coherent Optical Communication System for UAV Air-to-Ground Scenarios.

Entropy (Basel, Switzerland)·2026

Same journal

Information Geometry and Asymptotic Theory for SMML Estimators.

Entropy (Basel, Switzerland)·2026

Same journal

Correlation Entropy and Power-Law Kinetics.

Entropy (Basel, Switzerland)·2026

Same journal

Research on the Contagion of Systemic Financial Risk Under the Impact of Climate Risks-From the Perspective of Complex Networks and Machine Learning.

Entropy (Basel, Switzerland)·2026

Same journal

The Statistical-Mechanical Meaning of the Wave Function of Quantum Mechanics.

Entropy (Basel, Switzerland)·2026

See all related articles

Search research articles

Related Experiment Video

Updated: Jan 16, 2026

Author Spotlight: Developing Low-Tech Balance Assessment Methods for Broad-Spectrum Healthcare Applications

Author Spotlight: Developing Low-Tech Balance Assessment Methods for Broad-Spectrum Healthcare Applications

Published on: September 1, 2023

Benchmarking Static Analysis for PHP Applications Security.

Jiazhen Zhao^1,2, Kailong Zhu^1,2, Canju Lu^1,2

¹College of Electronic Engineering, National University of Defense Technology, Hefei 230037, China.

Entropy (Basel, Switzerland)

|September 27, 2025

Summary

This summary is machine-generated.

This study introduces a systematic framework to evaluate PHP Static Application Security Testing (SAST) tools. The new method quantifies information loss and reduces uncertainty for more reliable security vulnerability detection.

Keywords:

assessment system benchmarking information entropy php application security static analysis uncertainty quantification

More Related Videos

Author Spotlight: Innovations in iTUG Test for Enhanced Risk Assessment and Cognitive Insights

Author Spotlight: Innovations in iTUG Test for Enhanced Risk Assessment and Cognitive Insights

Published on: October 25, 2024

Author Spotlight: Advancing Pathogen Diagnostics with Standardized LAMP

Author Spotlight: Advancing Pathogen Diagnostics with Standardized LAMP

Published on: September 8, 2023

Related Experiment Videos

Last Updated: Jan 16, 2026

Author Spotlight: Developing Low-Tech Balance Assessment Methods for Broad-Spectrum Healthcare Applications

Author Spotlight: Developing Low-Tech Balance Assessment Methods for Broad-Spectrum Healthcare Applications

Published on: September 1, 2023

Author Spotlight: Innovations in iTUG Test for Enhanced Risk Assessment and Cognitive Insights

Author Spotlight: Innovations in iTUG Test for Enhanced Risk Assessment and Cognitive Insights

Published on: October 25, 2024

Author Spotlight: Advancing Pathogen Diagnostics with Standardized LAMP

Author Spotlight: Advancing Pathogen Diagnostics with Standardized LAMP

Published on: September 8, 2023

Area of Science:

Computer Science
Software Engineering
Cybersecurity

Background:

PHP is a widely used server-side language but vulnerable to security flaws.
Current Static Application Security Testing (SAST) tools for PHP lack systematic evaluation criteria.
Existing SAST evaluation methods suffer from uncontrolled variability, hindering accurate performance measurement.

Purpose of the Study:

To develop a systematic evaluation framework for PHP SAST tools.
To provide accurate and comprehensive assessments of SAST vulnerability detection capabilities.
To address limitations in quantifying information loss and uncertainty during SAST analysis.

Main Methods:

Developed a systematic evaluation framework for PHP SAST tools.
Isolated key factors influencing data flow analysis.
Enabled evaluation across four progressive dimensions with controlled information diversity.
Validated the framework's feasibility using a benchmark instance.

Main Results:

The framework reduces evaluation entropy, enabling more reliable measurement of SAST detection capabilities.
Demonstrated the framework's ability to reveal limitations in current SAST tools.
Provided actionable insights for improving PHP SAST tools.

Conclusions:

The developed framework offers a systematic approach to evaluate PHP SAST tools.
This systematic evaluation leads to more reliable and accurate assessments of SAST performance.
The framework facilitates targeted improvements in SAST tools for enhanced PHP security.