An Effective Visual System for Static Analysis of Source Code

Abstract:

In the software development lifecycle, code static analysis takes an important part in building secure software. To help discover the potential security issues in source code, large numbers of static analysis tools are developed. But the results generated by them display in the form of pure text, so it is time-consuming for developers to analyze these text messages, and it is difficult for developers to concentrate on the most interesting defects in huge data. In this paper, we have developed a visualization system oriented to Java source code, which presents the results in graphics from a developer’s point of view, to help developers to analysis code defects. A novel layout is proposed to visualize software source code in a hierarchy way, which shows the physical structure of the software. A visual overview and powerful interaction is provided in this system which allows the developer to focus on the most pressing defects within huge volumes of source code.

• Periodical: Advanced Materials Research (Volumes 433-440)
• Pages: 5453-5458
• DOI: https://doi.org/10.4028/www.scientific.net/AMR.433-440.5453
• Online since: January 2012
• Authors: Ying Wan, Chuan Qi Tan, Zhi Gang Wang, Guo Qiang Wang, Xiao Jin Hong
• Keywords: Code Defects, Source Code Visualization, Static Analysis

References

[1] Static program analysis. http: /en. wikipedia. org/wiki/Static_program_analysis.

[2] Stephen G. Eick, Joseph L. Steffen and Eric E. Sumner, Jr. . Seesoft-A Tool for Visualizing Line Oriented Software Statistics, IEEE Transactions on Software Engineering, vol. 18, no. 11, pp.957-968, Nov. (1992).

DOI: 10.1109/32.177365

[3] John R. Goodall, Hassan Radwan, Lenny Halseth. Visual Analysis of Code Security, Proceedings of the 7th International Symposium on Visualization for Cyber Security, ACM International Conference Proceeding Series, pp.46-51, (2010).

DOI: 10.1145/1850795.1850800

[4] Wittenburg, K., Lanning, T., Heinrichs, M. and Stanton, M. Parallel bargrams for consumer-based information exploration and choice, Proceedings of the ACM Symposium on User Interface Software and Technology (UIST), ACM, Orlando, Florida, 51-60, (2001).

DOI: 10.1145/502348.502357

[5] The Visualiser. http: /www. eclipse. org/ajdt/visualiser.

[6] Guillaume Langelier, Houari Sahraoui, Pierre Poulin. Visualization-based Analysis of Quality for Large-scale Software Systems, 20th IEEE/ACM International Conference on Automated Software Engineering, ASE 2005, pp.214-223, (2005).

DOI: 10.1145/1101908.1101941

[7] PMD. http: /pmd. sourceforge. net.

[8] B. Bederson, B. Shneiderman, and M. Wattenberg, Ordered and Quantum Treemaps: Making Effective Use of 2D Space to Display Hierarchies, ACM Transactions on Graphics, vol. 21, no. 4, pp.833-854, Oct. (2002).

DOI: 10.1145/571647.571649

[9] Rectangle packer algorithm. http: /www. iguanademos. com/Jare/Articles. php?view=RectPlace.