在伤口上擦盐吗? 对重构对安全的影响进行大规模调查
Emanuele Iannone1, Zadia Codabux2, Valentina Lenarduzzi3
1SeSa Lab, University of Salerno, Via Giovanni Paolo II, 132, 84084 Fisciano, SA Italy.
概括
软件重构影响安全,一些方法通过封装关键代码来提高安全性. 然而,其他类型的重构与安全漏洞和最佳实践违规有关.
科学领域:
- 软件工程 软件工程 软件工程
- 实证软件工程 实证软件工程
- 软件安全 软件安全
背景情况:
- 软件重构旨在在不改变外部行为的情况下提高代码质量.
- 重构是手动的,容易出错,并可能引入缺陷.
- 重构对软件安全的影响在很大程度上仍未被探索.
研究的目的:
- 实证地研究重构对应用程序安全配置文件的影响.
- 分析重构与安全指标,技术债务和漏洞之间的关系.
主要方法:
- 一个三层级的挖矿软件存储库研究.
- 分析了39个项目和7708个重构承诺中的14种重构类型.
- 对安全指标的影响评估,安全技术债务和已知的漏洞的引入.
主要成果:
- 重构显示了与安全的有限的整体联系.
- 在线方法和提取接口重构通过封装关键代码来提高安全性.
- 提取超级类和提取属性与安全最佳实践违规有关.
- 提取超级类和提取和移动方法的重构与漏洞的引入有关.
结论:
- 重构的安全影响是微妙的,特定类型提供好处,而其他类型则带来风险.
- 为研究人员和从业人员提供建议,以减轻重构过程中的安全风险.
- 需要进一步的研究来充分理解和管理重构的安全影响.
更多相关视频
09:14Exploring the Neural Correlates of Cognitive Reappraisal in Obsessive-Compulsive Disorder Using Task-based Functional Magnetic Resonance Imaging
Published on: March 14, 2025
248
05:26Author Spotlight: Innovations in iTUG Test for Enhanced Risk Assessment and Cognitive Insights
Published on: October 25, 2024
1.1K
相关概念视频
Stability of structures
200
In mechanical engineering, the stability of systems under various forces is critical for designing durable and efficient structures. One fundamental way to explore these concepts is by analyzing systems like two rods connected at a pivot point, O, with a torsional spring of spring constant k at the pivot point. This system is similar in appearance to a scissor jack used to change tires on a car. In this case, the arms of the linkage (equivalent to the rods in this system) are entirely vertical,...
200
Corrosion of Reinforcement
220
The corrosion of steel reinforcement within concrete is a process influenced by the material's inherent properties and external factors. The high pH level of around 13, provided by calcium hydroxide present in concrete, initially protects the steel reinforcement by promoting the formation of a passive iron oxide layer on its surface.
However, over time and under certain conditions like carbonation, chloride ingress, and cracking this protective state can be compromised. Steel has areas with...
However, over time and under certain conditions like carbonation, chloride ingress, and cracking this protective state can be compromised. Steel has areas with...
220
Design Consideration
214
Designing a structure involves a series of considerations, primarily the material's ultimate strength, calculated through tests that measure changes under increased force until the material reaches its breaking point or limit. The ultimate load, where the material breaks, is divided by its original cross-sectional area, resulting in the ultimate normal stress or strength. The ultimate shearing stress is another significant factor taken into account.
The factor of safety is another key...
The factor of safety is another key...
214
Leaky Scanning
5.2K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.2K
Types of Errors: Detection and Minimization
1.7K
Error is the deviation of the obtained result from the true, expected value or the estimated central value. Errors are expressed in absolute or relative terms.
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
1.7K
The Stanford Prison Experiment
23.3K
The famous and controversial Stanford Prison Experiment, conducted by social psychologist Philip Zimbardo and his colleagues at Stanford University, demonstrated the power of social roles, social norms, and scripts.
23.3K
