Detecting API-Misuse Based on Pattern Mining via API Usage Graph with Parameters

被引:0
|
作者
Wu, Yulin [1 ]
Xu, Zhiwu [1 ]
Qin, Shengchao [2 ]
机构
[1] Shenzhen Univ, Coll Comp Sci & Software Engn, Shenzhen, Peoples R China
[2] Xidian Univ, Sch Comp Sci & Technol, Xian, Peoples R China
基金
中国国家自然科学基金;
关键词
API-Misuse Detection; API Pattern; Static Analysis;
D O I
10.1007/978-3-031-35257-7_21
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
API misuse is a common issue that can trigger software crashes, bugs, and vulnerabilities. To address this problem, researchers have proposed pattern-based violation detectors that automatically extract patterns from code. However, these detectors have demonstrated low precision in detecting API misuses. In this paper, we propose a novel API misuse detector. Our proposed detector initially extracts API usages from the code and represents them as API Usage Graphs with Parameters (AUGPs). Utilizing the association rule algorithm, it then mines the binary rules, which are subsequently employed to detect the possible violations. The experimental results show that, comparing against five state-of-the-art detectors on the public dataset MuBench, our detector achieves the highest precision (1x more precise than the second-best one) and the highest F1-score (50% higher than the second-best one).
引用
收藏
页码:344 / 363
页数:20
相关论文
共 50 条
  • [1] Accelerating API-Based Program Synthesis via API Usage Pattern Mining
    Liu, Binbin
    Dong, Wei
    Zhang, Yinzhu
    IEEE ACCESS, 2019, 7 : 159162 - 159176
  • [2] API-Misuse Detection Driven by Fine-Grained API-Constraint Knowledge Graph
    Ren, Xiaoxue
    Ye, Xinyuan
    Xing, Zhenchang
    Xia, Xin
    Xu, Xiwei
    Zhu, Liming
    Sun, Jianling
    2020 35TH IEEE/ACM INTERNATIONAL CONFERENCE ON AUTOMATED SOFTWARE ENGINEERING (ASE 2020), 2020, : 461 - 472
  • [3] MUBench: A Benchmark for API-Misuse Detectors
    Amann, Sven
    Nadi, Sarah
    Nguyen, Hoan A.
    Nguyen, Tien N.
    Mezini, Mira
    13TH WORKING CONFERENCE ON MINING SOFTWARE REPOSITORIES (MSR 2016), 2016, : 464 - 467
  • [4] KGAMD: An API-Misuse Detector Driven by Fine-Grained API-Constraint Knowledge Graph
    Ren, Xiaoxue
    Ye, Xinyuan
    Xing, Zhenchang
    Xia, Xin
    Xu, Xiwei
    Zhu, Liming
    Sun, Jianling
    PROCEEDINGS OF THE 29TH ACM JOINT MEETING ON EUROPEAN SOFTWARE ENGINEERING CONFERENCE AND SYMPOSIUM ON THE FOUNDATIONS OF SOFTWARE ENGINEERING (ESEC/FSE '21), 2021, : 1515 - 1519
  • [5] A Systematic Evaluation of Static API-Misuse Detectors
    Amann, Sven
    Hoan Anh Nguyen
    Nadi, Sarah
    Nguyen, Tien N.
    Mezini, Mira
    IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 2019, 45 (12) : 1170 - 1188
  • [6] Detecting Inefficient API Usage
    Kawrykow, David
    Robillard, Martin P.
    2009 31ST INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING, COMPANION VOLUME, 2009, : 183 - 186
  • [7] Guided pattern mining for API misuse detection by change-based code analysis
    Nielebock, Sebastian
    Heumueller, Robert
    Schott, Kevin Michael
    Ortmeier, Frank
    AUTOMATED SOFTWARE ENGINEERING, 2021, 28 (02)
  • [8] Guided pattern mining for API misuse detection by change-based code analysis
    Sebastian Nielebock
    Robert Heumüller
    Kevin Michael Schott
    Frank Ortmeier
    Automated Software Engineering, 2021, 28
  • [9] APP-Miner: Detecting API Misuses via Automatically Mining API Path Patterns
    Jiang, Jiasheng
    Wu, Jingzheng
    Ling, Xiang
    Luo, Tianyue
    Qu, Sheng
    Wu, Yanjun
    45TH IEEE SYMPOSIUM ON SECURITY AND PRIVACY, SP 2024, 2024, : 4034 - 4052
  • [10] A Graph-based Approach to API Usage Adaptation
    Hoan Anh Nguyen
    Tung Thanh Nguyen
    Wilson, Gary, Jr.
    Anh Tuan Nguyen
    Kim, Miryung
    Nguyen, Tien N.
    ACM SIGPLAN NOTICES, 2010, 45 (10) : 302 - 321