.png){kind=icon}
返回
XtraLibD: Detecting Irrelevant Third-Party Libraries in Java and Python Applications
.png){kind=icon}
OA
AI
DOI：10.1007/978-3-030-96648-5_7.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Software development comprises the use of multiple Third-Party Libraries (TPLs). However, the irrelevant libraries present in software application's distributable often lead to excessive consumption of resources such as CPU cycles, memory, and modile-devices' battery usage. Therefore, the identification and removal of unused TPLs present in an application are desirable. We present a rapid, storage-efficient, obfuscation-resilient method to detect the irrelevant-TPLs in Java and Python applications. Our approach's novel aspects are i) Computing a vector representation of a .class file using a model that we call Lib2Vec. The Lib2Vec model is trained using the Paragraph Vector Algorithm. ii) Before using it for training the Lib2Vec models, a .class file is converted to a normalized form via semantics-preserving transformations. iii) A eXtra Library Detector (XtraLibD) developed and tested with 27 different language-specific Lib2Vec models. These models were trained using different parameters and >30,000 .class and >478,000 .py files taken from >100 different Java libraries and 43,711 Python available at MavenCentral.com and Pypi.com , respectively. XtraLibD achieves an accuracy of 99.48% with an F1 score of 0.968 and outperforms the existing tools, viz., LibScout, LiteRadar, and LibD with an accuracy improvement of 74.5%, 30.33%, and 14.1%, respectively. Compared with LibD, XtraLibD achieves a response time improvement of 61.37% and a storage reduction of 87.93% (99.85% over JIngredient). Our program artifacts are available at haps://www.doi.org/10.5281/zenodo.5179747.
Keyword:
Third-party library detection
Code similarity
Paragraph vectors
Software bloat
Obfuscation
期刊
E
IF:
0
论文数:
1
被引数:
0
机构
引用论文
分享收藏Ubiqutination of the transcriptional coactivator p300 during retinic acid induced differentiation
OAAI
OAAI分享收藏Ligand-dependent transcription activation by nuclear receptors requires the DRIP complex.png)
Nature
NatureIF0
PREAI
分享收藏
查看更多内容