Program Analysis Methods Research Articles

Sligpt: A Large Language Model-Based Approach for Data Dependency Analysis on Solidity Smart Contracts

The advent of blockchain technology has revolutionized various sectors by providing transparency, immutability, and automation. Central to this revolution are smart contracts, which facilitate trustless and automated transactions across diverse domains. However, the proliferation of smart contracts has exposed significant security vulnerabilities, necessitating advanced analysis techniques. Data dependency analysis is a critical program analysis method used to enhance the testing and security of smart contracts. This paper introduces Sligpt, an innovative methodology that integrates a large language model (LLM), specifically GPT-4o, with the static analysis tool Slither, to perform data dependency analyses on Solidity smart contracts. Our approach leverages both the advanced code comprehension capabilities of GPT-4o and the advantages of a traditional analysis tool. We empirically evaluate Sligpt using a curated dataset of Ethereum smart contracts. Sligpt achieves significant improvements in precision, recall, and overall analysis depth compared with Slither and GPT-4o, providing a robust solution for data dependency analysis. This paper also discusses the challenges encountered, such as the computational resource requirements and the inherent variability in LLM outputs, while proposing future research directions to further enhance the methodology. Sligpt represents a significant advancement in the field of static analysis on smart contracts, offering a practical framework for integrating LLMs with static analysis tools.

Application of Acoustic Emission Technology for Bearing Condition Monitoring on Passenger Ropeway

Rolling bearings are important stressed components of driving wheels and detour wheels on passenger ropeway, and their failure may lead to accidents and casualties. After the ropeway is installed and put into operation, the rolling bearings in the wheels are difficult to disassemble. Once disassembled, the bearing may be damaged. Due to the installation position and the complex operation environment, the health status of the rolling bearings is a blind spot for ropeway inspection and detection. Acoustic emission detection technology is used to monitor the rolling bearings of passenger ropeways. After a large number of field tests, the acoustic emission monitoring program and signal analysis method of rolling bearing on ropeway were proposed. The parameter characteristics of acoustic emission signals obtained in bearing operating were analyzed from two aspects: the ropeway operating cycle and the bearing operating cycle. Spectrum analysis of typical signals was performed, and the spectrum characteristics of typical acoustic emission signals of rolling bearing during the operation of the ropeway were obtained. On-site tests results show that using acoustic emission technology to perform condition monitoring and fault diagnosis of low-speed rolling bearings on passenger ropeways has good application prospects.

Analysis of the Advantages of Open Pit Mining

In the process of open-pit coal mining, the landslide phenomenon is very obvious, so for the safety of mine personnel and the smooth implementation of the project, studying the stability of the slope angle is an extremely important task. There are many factors that affect the stability of the slope, such as soil quality, climatic conditions, later pressure, etc., this project takes the open-pit mine as the research object, calculates the slope coefficient through geological data exploration combined with program analysis method, and then sets up a soil dump near the mining area, so as to improve efficiency, project safety and planning maximum benefits.

SafeCheck: Detecting smart contract vulnerabilities based on static program analysis methods

AbstractEthereum smart contracts are a special type of computer programs. Once deployed on the blockchain, they cannot be modified. This presents a significant challenge to the security of smart contracts. Previous research has proposed static and dynamic detection tools to identify vulnerabilities in smart contracts. These tools check contract vulnerabilities based on predefined rules, and the accuracy of detection strongly depends on the design of the rules. However, the constant emergence of new vulnerability types and strategies for vulnerability protection leads to numerous false positives and false negatives by tools. To address this problem, we analyze the characteristics of vulnerabilities in smart contracts and the corresponding protection strategies. We convert the contracts' bytecode into an intermediate representation to extract semantic information of the contracts. Based on this semantic information, we establish a set of detection rules based on semantic facts and implement a vulnerability detection tool SafeCheck using static program analysis methods. The tool is used to detect six common types of vulnerabilities in smart contracts. We have extensively evaluated SafeCheck on real Ethereum smart contracts and compared it to other tools. The experimental results show that SafeCheck performs better in smart contract vulnerability detection compared to other typical tools, with a high F‐measure (up to 83.1%) for its entire dataset.

Use of Son-Rise Program and Applide Behavior Analysis (ABA) Method on Language Development of Children with Autism

There are various approaches that can be used in language development in children with autism. Son-Rise programs and Applide Behavior Analysis (ABA) methods are approaches that can be used in the language development of children with autism. The author discusses matters related to the Use of Son-Rise programs and Applide Behavior Analysis (ABA) Methods for Language Development of Children with Autism. Aims to describe son-rise programs and Applide Behavior Analysis (ABA) Methods for object language development. The results of the discussion were how to use the Son-Rise program and the Applide Behavior Analysis (ABA) Method for Language Development of Children with Autism.

Solvable Polynomial Ideals: The Ideal Reflection for Program Analysis

This paper presents a program analysis method that generates program summaries involving polynomial arithmetic. Our approach builds on prior techniques that use solvable polynomial maps for summarizing loops. These techniques are able to generate all polynomial invariants for a restricted class of programs, but cannot be applied to programs outside of this class---for instance, programs with nested loops, conditional branching, unstructured control flow, etc. There currently lacks approaches to apply these prior methods to the case of general programs. This paper bridges that gap. Instead of restricting the kinds of programs we can handle, our method abstracts every loop into a model that can be solved with prior techniques, bringing to bear prior work on solvable polynomial maps to general programs. While no method can generate all polynomial invariants for arbitrary programs, our method establishes its merit through a monotonicty result. We have implemented our techniques, and tested them on a suite of benchmarks from the literature. Our experiments indicate our techniques show promise on challenging verification tasks requiring non-linear reasoning.

Design and selection of alternative embankments to overcome tidal flood (A case study of the construction plan of a tidal embankment at Sayung, Demak)

Tidal embankment project in Sayung is one of the construction planning projects of the government. There are three alternatives of embankment designs that may be applied in the construction project; (1) Parapet Wall and Corrugated Concrete Sheet Pile (CCSP) reinforcement, (2) Concrete Wall Embankment with mini pile reinforcement, and (3) Multipurpose Panel System Embankment (SPS). The research was needed to examine the designs to find the fittest. This study aimed to redesign the construction plan of the tidal embankment using Plaxis software. This software was to analyze and determine the safety factors of the three alternative embankment designs. It was stated to be safe because it exceeded the standard of 1.5. One of the three alternative embankments was implemented using the Analytical Hierarchy Process (AHP) method based on predetermined criteria: (1) Aspects of function and benefits, and (2) Aspects of site conditions which include cost and construction process. From the alternative selection using the expert choice program analysis method, the concrete wall embankment with mini-pile reinforcement was the main priority, with a weight value of 45.9%. Meanwhile, the second priority was the Parapet Wall and CCSP Reinforcement with a weight value of 37.2%, and the third choice was the Multipurpose Panel System Embankment (SPS) with a weight of 17%.

DFSGraph: Data Flow Semantic Model for Intermediate Representation Programs Based on Graph Network

With the improvement of software copyright protection awareness, code obfuscation technology plays a crucial role in protecting key code segments. As the obfuscation technology becomes more and more complex and diverse, it has spawned a large number of malware variants, which make it easy to evade the detection of anti-virus software. Malicious code detection mainly depends on binary code similarity analysis. However, the existing software analysis technologies are difficult to deal with the growing complex obfuscation technologies. To solve this problem, this paper proposes a new obfuscation-resilient program analysis method, which is based on the data flow transformation relationship of the intermediate representation and the graph network model. In our approach, we first construct the data transformation graph based on LLVM IR. Then, we design a novel intermediate language representation model based on graph networks, named DFSGraph, to learn the data flow semantics from DTG. DFSGraph can detect the similarity of obfuscated code by extracting the semantic information of program data flow without deobfuscation. Extensive experiments prove that our approach is more accurate than existing deobfuscation tools when searching for similar functions from obfuscated code.

A SURVEY ON AROMATHERAPY KNOWLEDGE AND PRACTICES IN PHARMACIES

Aromaterapi, sağlıklı ve doğal yaşam için öne çıkan tamamlayıcı tedavi yöntemlerinden biridir. Ülkemizde
 aromaterapinin popülaritesi son yıllarda giderek artmakta ve aromaterapiye en güvenli erişim yolu olarak
 eczaneler karşımıza çıkmaktadır. Bu çalışmayla aromaterapi için eczanelere başvuran katılımcıların geçmişteki
 aromaterapi deneyimlerini de kapsayarak aromaterapiye yaklaşımları, aromaterapi uyguladıkları süreç ve sonrası
 hakkında toplanan verilerin değerlendirilmesi amaçlanmıştır. Çalışma kapsamında Mayıs 2020-Haziran 2020
 tarihleri arasında İstanbul’da yer alan ve yoğun bir şekilde aromaterapi uygulamaları yapan 2 eczaneye başvuran
 katılımcılarla bir anket çalışması yapılmıştır. Çalışmada elde edilen bilgiler SPSS analiz programı ve çeşitli
 analiz yöntemleri ile değerlendirilmiştir. Çalışmaya katılan 85 katılımcının büyük çoğunluğunun 20-40 yaş
 aralığında olduğu, 64’ünün kadın 21’inin erkek olduğu bulunmuştur. Çalışma sonucunda aromaterapiye en sık
 başvuru sebeplerinin; soğuk algınlığına bağlı semptomlar, saç sorunları, akne tedavisi, dermatit ve yara-leke
 tedavisi olduğu görülmüştür. En sık kullanılan uçucu yağın lavanta esansiyel yağı olduğu belirlenmiştir. Ankette
 yer alan katılımcıların aromaterapiyi; %50 oranında sağlık çalışanları olan eczacı ve doktor, %50 oranında sosyal
 medya ve yakın çevre kaynağından duydukları görülmüş, katılımcıların %69,4’ü aromaterapiye tedavi gücüne
 inanarak başvurmuştur. Aromaterapiye başvuran katılımcıların ürünleri kullanmadan önce %63,5 oranında
 araştırma yaptığı saptanmıştır. Kullanılan ürünlerin yararlı olduğunu belirten katılımcı oranı %57, kısmen fayda
 gören katılımcıların oranı %39, fayda görmediğini belirten katılımcıların oranı ise %4’tür. Katılımcıların çok
 çeşitli rahatsızlıklarda aromaterapiye başvurduğu görülmektedir. Aromaterapinin duyulduğu kaynak olarak en
 çok eczacı cevabı verilmiştir. Çalışma sonucunda katılımcıların aromaterapiden büyük oranda fayda gördüğü ve
 çevrelerine aromaterapiyi tavsiye edebilecekleri görülmüştür. Aynı zamanda çalışmaya katılan katılımcılarda
 aromaterapinin yan etki oranının düşük olduğu görülmektedir.

History of Abstract Interpretation

We trace the roots of abstract interpretation and its role as a foundational principle to understand and design static program analysis and verification methods. Starting from the historical roots of formal methods and static program analysis, we show how abstract interpretation evolved and influenced the way we reason about program correctness in different programming languages and how this method shaped the literature and the practice in program analysis in the last 45 years.

An empirical formula development to predict suspended sediment load for Khour Al-Zubair port, South of Iraq

AbstractA new formula for determining the suspended sediment load in Khour Al-Zubair port has been proposed using dimensional analysis. Six cross-sections have been identified in Khour Al-Zubair port at Basrah province, South of Iraq for the purpose of conducting field measurements during the two tidal periods (Neap and Spring). The study involved taking field measurements of the hydraulic and fluid properties, and sediment sampling by section every 2 h to get effective parameters used for developing empirical formula. These parameters include the density of sediment (ρs), mean velocity (V), hydraulic radius (Rh), fall velocity of the particle (Ws), median grain size (d50), the salinity of water (S), water level (WL), the width of the estuary (B), specific gravity (Gs), maximum flow depth (Dmax), and kinematics viscosity (ν). The formula was developed using the statistical analysis using the SPSS program and dimensional analysis method. A good agreement between the loads computed by the suggested formula and the observed data has been attained based on the correlation coefficient value (R= 0.97). The results showed that the average total suspended sediment loads by using the proposed formula is 1288285.464 tons/year.

Kex: A Platform For Analysis Of JVM Programs

Introduction: Over the last years program analysis methods were widely used for software quality assurance. Different types of program analysis require various levels of program representation, analysis methods, etc. Platforms that provide utilities to implement different types of analysis on their basis become very important because they allow one to simplify the process of development. Purpose: Development of a platform for analysis of JVM programs. Results: In this paper we present Kex, a platform for building program analysis tools for JVM bytecode. Kex provides three abstraction levels. First is Kfg, which is an SSA-based control flow graph representation for bytecode-level analysis and transformation. Second is a symbolic program representation called Predicate State, which consists of first order logic predicates that represent instructions of the original program, constraints, etc. The final level is SMT integration layer for constraint solving. It currently provides an interface for interacting with three SMT solvers. Practical relevance: We have evaluated our platform by considering two prototypes. First prototype is an automatic test generation tool that has participated in SBST 2021 tool competition. Second prototype is a tool for detection of automatic library integration errors. Both prototypes have proved that Kex can be used to implement competitive and powerful program analysis tools.

EFEKTIFITAS PENGGUNAAN APLIKASI DARING DAN VIDEO CONFERENCE MATERI SYSTEM DESIGN AND ANALISYS METHOD (SDAM) MASA PANDEMI

The phenomenon of the Covid-19 virus that spreads to Indonesia which causes the death rate to increase, Covid-19 has an impact on the application of learning patterns in the world of education. This also occurs in the course of the study program system design and analysis method (SDAM) for Computer and Information Engineering Education, Tarbiyah, IAIN Bukittinggi. The process of delivering lecture material switches from face-to-face (offline) to fully digital (online) by utilizing educational-based applications, namely Scoology and Zoom Meetings. The purpose of this study was to determine the level of understanding of students in using the application. The research method used is a survey method which was conducted online by taking samples of students in the System Design and Analysis Method (SDAM) course. The expected result of this research is that it can be used as a benchmark in the development of the online teaching and learning process in the coming semester

Designing FPGAs and Reconfigurable SoCs Using Methods of Program Analysis and Prototyping

Designing FPGAs and Reconfigurable SoCs Using Methods of Program Analysis and Prototyping

A Unified Model for Context-Sensitive Program Analyses:

Context-sensitive methods of program analysis increase the precision of interprocedural analysis by achieving the effect of call inlining. These methods have been defined using different formalisms and hence appear as algorithms that are very different from each other. Some methods traverse a call graph top-down, whereas some others traverse it bottom-up first and then top-down. Some define contexts explicitly, whereas some do not. Some of them directly compute data flow values, while some first compute summary functions and then use them to compute data flow values. Further, different methods place different kinds of restrictions on the data flow frameworks supported by them. As a consequence, it is difficult to compare the ideas behind these methods in spite of the fact that they solve essentially the same problem. We argue that these incomparable views are similar to those of blind men describing an elephant, called context sensitivity, and make it difficult for a non-expert reader to form a coherent picture of context-sensitive data flow analysis. We bring out this whole-elephant view of context sensitivity in program analysis by proposing a unified model of context sensitivity that provides a clean separation between computation of contexts and computation of data flow values. Our model captures the essence of context sensitivity and defines simple soundness and precision criteria for context-sensitive methods. It facilitates declarative specifications of context-sensitive methods, insightful comparisons between them, and reasoning about their soundness and precision. We demonstrate this by instantiating our model to many known context-sensitive methods.

Kajian Manajemen Risiko Pada Proyek Preservasi Jalan Dengan Metode AHP (Analytical Hierarchy Process)

This study aims to conduct a risk management study on the Poigar-Kaiya-Maelang Road Preservation project that affects the achievement of project performance on time by identifying, classifying, analyzing, handling dominant risks. The research method used is descriptive qualitative analysis method to identify and classify dominant risks. The variables used are literature studies, expert validation and factor analysis and main component analysis using SPSS version 26 program and quantitative descriptive analysis methods to get perceptions about the frequency and impact of risk on project time performance with risk management standards AS/ZNS 4360 :2004 and determining the priority scale for handling using the AHP method. The results showed that the dominant risks with significant risk categories (significant risk) with the AHP method obtained a priority scale for handling, namely planning and nature by 22.7%, resources and OHS 18.70%, personnel and equipment control by 14.5%. , productivity and distribution of materials by 12.8%, scheduling and finance by 11.3%, coordination and management by 8.2%, communication and work methods by 6.8%, operator capability by 4.9%.

Devising a method to analyze the current state of the manipulator workspace

This paper has proposed a program analysis method over the current state of the workspace of an anthropomorphic manipulator using the Mathcad software application package (USA). The analysis of the manipulator workspace helped solve the following sub-tasks: to calculate the limits of the grip reach, to determine the presence of "dead zones" within the manipulator workspace, to build the boundaries of the manipulator workspace. A kinematic scheme of the manipulator typically provides for at least five degrees of mobility, which is why in the three-dimensional Cartesian coordinate system the work zone boundaries represent the surfaces of a complex geometric shape. The author-devised method makes it possible to construct the projections of the boundaries of the manipulator's work zone onto the coordinate planes in the frame of reference associated with the base of the robot.
 Using Mathcad's built-in features makes it possible to effectively solve the above sub-tasks without wasting time developing specialized software. The Mathcad software application package provides for the possibility of a symbolic solution to the first problem of the kinematics of an industrial robot, that is, the program generates analytical dependences of the coordinates for special point P (pole) of the grip on the trigonometrical functions of the generalized coordinates. The resulting analytical dependences are used for kinematic and dynamic analysis of the manipulator.
 Special features in constructing mathematical models when using the Mathcad software application package have been revealed. Simulating the manipulator movement taking into consideration constraints for kinematic pairs, the drives' power, as well as friction factors, makes it possible to optimize the parameters of the manipulator kinematic scheme.
 An example of the analysis of the working space of an anthropomorphic manipulator with five degrees of mobility has been considered.
 The reported results could be used during the design, implementation, modernization, and operation of manipulators.

Order-sorted Homeomorphic Embedding Modulo Combinations of Associativity and/or Commutativity Axioms*

The Homeomorphic Embedding relation has been amply used for defining termination criteria of symbolic methods for program analysis, transformation, and verification. However, homeomorphic embedding has never been investigated in the context of order-sorted rewrite theories that support symbolic execution methods modulo equational axioms. This paper generalizes the symbolic homeomorphic embedding relation to order–sorted rewrite theories that may contain various combinations of associativity and/or commutativity axioms for different binary operators. We systematically measure the performance of different, increasingly efficient formulations of the homeomorphic embedding relation modulo axioms that we implement in Maude. Our experimental results show that the most efficient version indeed pays off in practice.

A Formal Model for Detecting Bugs by Symbolic Execution of Programs

Automatic detection of bugs in programs is an extremely important direction of current research and development in the field of program reliability and security assurance. Earlier studies covered, methods for program analysis that combine the dynamic symbolic execution, randomized testing, and static analysis. In this paper, a formal model for detecting bugs using the symbolic execution of programs and its implementation for detecting the buffer bounds violation is presented. A formal model of the program symbolic execution is described, and a theorem on detecting a bug on the basis of the violation of the operation domain is formulated and proved. An implementation of the buffer bounds violation analyzer in the process of symbolic program execution is described, and the application of the implemented prototype for analyzing a set of programs in Debian Linux is presented. The experiments confirm the actionability of the proposed method.

Pengaruh Budaya Organisasi, Kompensasi, Dan lingkungan Kerja Terhadap Kinerja Pegawai Dengan Kepuasaan Kerja Sebagai Variabel Intervening (Kantor Bappeda Kabupaten Bima NTB)

<p>This study aims to determine and analyze the influence of work culture, compensation, and work environment on employee performance with job satisfaction as an intervening variable. The idea of improving employee performance is in line with the need to improve the quality of sustainable development plans in planning agencies. Using a case study of employees at the Bima District Development Planning Agency (BAPPEDA Kabupaten Bima), this research highlights the importance of improving employee performance for achieving the quality of planning and budgeting policies. The criteria used in the purposive sampling are based on the status of position IIIa and a minimum working period of 3 years. The head of the BAPPEDA office was not selected as a respondent in the study. The total number of study participants was 51 employees. Data analysis using SPSS statistical program and parallel path analysis method. The results showed two interrelated patterns, first work culture and work environment have a positive and significant effect on job satisfaction, while compensation has a positive and insignificant effect on job satisfaction. Second, work culture and work environment have a positive and significant effect on employee performance, while compensation has a negative and significant effect on employee performance, and job satisfaction has a positive and insignificant effect on employee performance. This study suggests the importance of improving work culture and work environment, as well as providing compensation in fulfilling job satisfaction and employee satisfaction in order to have salary fairness, recognition of work dedication and individual needs to improve work performance</p>