JP7322963B2 - 評価装置、評価方法及びプログラム - Google Patents

評価装置、評価方法及びプログラム Download PDF

Info

Publication number
JP7322963B2
JP7322963B2 JP2021553261A JP2021553261A JP7322963B2 JP 7322963 B2 JP7322963 B2 JP 7322963B2 JP 2021553261 A JP2021553261 A JP 2021553261A JP 2021553261 A JP2021553261 A JP 2021553261A JP 7322963 B2 JP7322963 B2 JP 7322963B2
Authority
JP
Japan
Prior art keywords
library
risk
evaluation
value
source code
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
JP2021553261A
Other languages
English (en)
Japanese (ja)
Other versions
JPWO2021079496A5 (https=
JPWO2021079496A1 (https=
Inventor
淳 西岡
純明 榮
和彦 磯山
佑嗣 小林
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NEC Corp
Original Assignee
NEC Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by NEC Corp filed Critical NEC Corp
Publication of JPWO2021079496A1 publication Critical patent/JPWO2021079496A1/ja
Publication of JPWO2021079496A5 publication Critical patent/JPWO2021079496A5/ja
Application granted granted Critical
Publication of JP7322963B2 publication Critical patent/JP7322963B2/ja
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/577—Assessing vulnerabilities and evaluating computer system security
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/70—Software maintenance or management
    • G06F8/77—Software metrics
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
    • G06F2221/033—Test or assess software

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Stored Programmes (AREA)
  • Debugging And Monitoring (AREA)
JP2021553261A 2019-10-25 2019-10-25 評価装置、評価方法及びプログラム Active JP7322963B2 (ja)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2019/041929 WO2021079496A1 (ja) 2019-10-25 2019-10-25 評価装置、評価方法及びプログラム

Publications (3)

Publication Number Publication Date
JPWO2021079496A1 JPWO2021079496A1 (https=) 2021-04-29
JPWO2021079496A5 JPWO2021079496A5 (https=) 2022-06-24
JP7322963B2 true JP7322963B2 (ja) 2023-08-08

Family

ID=75619722

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2021553261A Active JP7322963B2 (ja) 2019-10-25 2019-10-25 評価装置、評価方法及びプログラム

Country Status (3)

Country Link
US (1) US12254097B2 (https=)
JP (1) JP7322963B2 (https=)
WO (1) WO2021079496A1 (https=)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2022269656A1 (ja) * 2021-06-21 2022-12-29 三菱電機株式会社 機械学習装置、深刻度予知装置、および機械学習方法
CN113867720B (zh) * 2021-09-29 2024-12-24 上海同星智能科技有限公司 软件平台用第三方程序库函数互调方法及互调系统
US20250103327A1 (en) * 2022-01-18 2025-03-27 Mitsubishi Electric Corporation Architecture lifetime estimation apparatus and method of estimating architecture lifetime
WO2025248642A1 (ja) * 2024-05-28 2025-12-04 Ｎｔｔ株式会社 評価装置、評価方法及び評価プログラム

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2001184441A (ja) 1999-12-27 2001-07-06 Nec Corp 診療録装置
JP2010191922A (ja) 2009-02-20 2010-09-02 Mitsubishi Electric Corp 履歴追跡結果出力装置及び履歴追跡結果出力プログラム及び記録媒体
US20150007330A1 (en) 2013-06-26 2015-01-01 Sap Ag Scoring security risks of web browser extensions
US20150268948A1 (en) 2014-03-18 2015-09-24 Henrik Plate Software dependency management through declarative constraints
US20180349614A1 (en) 2017-05-31 2018-12-06 ShiftLeft Inc System and method for application security profiling
US20190227902A1 (en) 2018-01-21 2019-07-25 Microsoft Technology Licensing, Llc. Time-weighted risky code prediction

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4162541B2 (ja) * 2002-06-07 2008-10-08 株式会社日立製作所 資産運用管理支援装置および資産運用管理支援方法
US7437718B2 (en) * 2003-09-05 2008-10-14 Microsoft Corporation Reviewing the security of trusted software components
JP4240504B2 (ja) 2006-08-04 2009-03-18 インターナショナル・ビジネス・マシーンズ・コーポレーション 製品開発プロセスにおける設計変更の影響度分析装置および方法
JP5201068B2 (ja) 2009-04-23 2013-06-05 富士通株式会社 危険度判定プログラム、危険度判定装置及び方法
US9858176B2 (en) 2013-08-12 2018-01-02 Nec Corporation Software aging test system, software aging test method, and program for software aging test
EP3155512A1 (en) 2014-06-13 2017-04-19 The Charles Stark Draper Laboratory, Inc. Systems and methods for software analytics
US10528741B1 (en) * 2016-07-13 2020-01-07 VCE IP Holding Company LLC Computer implemented systems and methods for assessing operational risks and mitigating operational risks associated with using a third party software component in a software application
US11481498B2 (en) * 2019-01-28 2022-10-25 Visa International Service Association Continuous vulnerability management for modern applications

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2001184441A (ja) 1999-12-27 2001-07-06 Nec Corp 診療録装置
JP2010191922A (ja) 2009-02-20 2010-09-02 Mitsubishi Electric Corp 履歴追跡結果出力装置及び履歴追跡結果出力プログラム及び記録媒体
US20150007330A1 (en) 2013-06-26 2015-01-01 Sap Ag Scoring security risks of web browser extensions
US20150268948A1 (en) 2014-03-18 2015-09-24 Henrik Plate Software dependency management through declarative constraints
US20180349614A1 (en) 2017-05-31 2018-12-06 ShiftLeft Inc System and method for application security profiling
US20190227902A1 (en) 2018-01-21 2019-07-25 Microsoft Technology Licensing, Llc. Time-weighted risky code prediction

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
OSSリスク管理ツール Checkmarx CxOSA，Prometech Simulation Conference 2018，2018年12月13日，pp.1－2

Also Published As

Publication number Publication date
US20220391516A1 (en) 2022-12-08
JPWO2021079496A1 (https=) 2021-04-29
US12254097B2 (en) 2025-03-18
WO2021079496A1 (ja) 2021-04-29

Similar Documents

Publication Publication Date Title
JP7322963B2 (ja) 評価装置、評価方法及びプログラム
Rahman et al. Gang of eight: A defect taxonomy for infrastructure as code scripts
Khan et al. xcodeeval: A large scale multilingual multitask benchmark for code understanding, generation, translation and retrieval
Yan et al. The current status of accessibility in mobile apps
Neuhaus et al. Predicting vulnerable software components
US20230281005A1 (en) Source code merge conflict resolution
Ross et al. Epidemiology as a framework for large-scale mobile application accessibility assessment
Nadi et al. Mining configuration constraints: Static analyses and empirical results
Wong et al. A survey on software fault localization
Cohen et al. Constructing interaction test suites for highly-configurable systems in the presence of constraints: A greedy approach
US11263071B2 (en) Enabling symptom verification
Von Rhein et al. Presence-condition simplification in highly configurable systems
Qin et al. Testmig: Migrating gui test cases from ios to android
Shang et al. Automated detection of performance regressions using regression models on clustered performance counters
Smidts et al. Software testing with an operational profile: OP definition
Papamichail et al. Measuring the reusability of software components using static analysis metrics and reuse rate information
Li et al. Open source software security vulnerability detection based on dynamic behavior features
Aalst Big software on the run: in vivo software analytics based on process mining (keynote)
Syer et al. Replicating and re-evaluating the theory of relative defect-proneness
Jaafar et al. Detecting asynchrony and dephase change patterns by mining software repositories
US20170242663A1 (en) Software model stability metrics
Mahmud et al. Acid: an api compatibility issue detector for android apps
Dou et al. Model-driven trace diagnostics for pattern-based temporal specifications
Biringa et al. Pace: A program analysis framework for continuous performance prediction
Henelius et al. Goldeneye++: A closer look into the black box

Legal Events

Date Code Title Description
A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20220418

A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20220418

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20230509

A521 Request for written amendment filed

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20230622

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20230627

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20230710

R151 Written notification of patent or utility model registration

Ref document number: 7322963

Country of ref document: JP

Free format text: JAPANESE INTERMEDIATE CODE: R151