2279 results about "Source code" patented technology

A system and method is described for internationalization of web pages by extracting translatable content from extensible mark-up language (XML), or similar data-centric meta-language representations of web pages or data used to build web pages. The extracted translatable content is stored in a translation task repository (TTR) accessible by the web developer and the translator. The XML representation is then modified to include selection control logic to select the appropriate translations for insertion into the final web page. The translator accesses the TTR to translate the appropriate content and saves the translations back to the TTR associated with the original translatable data. The translations are obtained from the TTR as selection cases for the selection control logic of the XML representation. As the XML is converted into the web source code, the selection logic and translations are embedded therein facilitating building the web site in multiple different languages.

The invention discloses an intelligent risk identification and self-adaptive repair method, system and device for a software supply chain and a medium, belongs to the field of network security and automatic software engineering, and aims to solve the technical problem of how to accurately and comprehensively identify software code supply chain risks including code snippets. A reliable and efficient automatic closed-loop repair scheme is provided, and the technical defects that in the prior art, the software code supply chain recognition range is limited, the repair process is rigid and the reliability is low are overcome. Analyzing the declarative dependency; meanwhile, semantic traceability based on artificial intelligence is carried out on the code snippets, and a global software material list is generated; and performing intelligent mapping on the software components in the global software bill of materials and the vulnerability database to identify risks.

The invention provides a business module source code generation method and system based on large model business reasoning, and belongs to the technical field of code generation. The business module source code generation method comprises the steps that semantic analysis is conducted on business requirements, and a business association graph with weights is constructed; performing module division, and decomposing a complete task into a plurality of sub-tasks; calling a coordination agent, distributing a corresponding module code generation agent based on a large model for each decomposed subtask, and injecting context information to generate a corresponding module code; wherein the module code generation agent learns a corresponding relationship between tasks and injected context information and codes in advance based on field self-adaptive staged training; and calling the verification agent to perform code quality verification. The method has the beneficial effects that the module division is performed based on the business association graph with the weight, the multi-agent collaborative code generation is constructed by adopting the field-adaptive staged training, and the quality of the generated code is verified, so that the code generation efficiency and quality are improved.

A method is provided for optimizing regression testing in a software development environment. The method includes analyzing source code to create a structural dependency graph that maps dependencies between code elements; identifying changes in the source code between a current version and a previous version; mapping the identified changes onto the structural dependency graph to determine affected code elements; selecting a subset of regression tests based on the affected code elements identified in the dependency graph; and executing the selected subset of regression tests to validate the changes in the source code.

The invention discloses a variation test method and device based on an intelligent automation script. The method comprises the following steps: extracting a statement execution sequence and a branch dependency relationship in an original source code by using a context-aware syntax tree, and generating a control flow diagram and a data flow diagram; performing code semantic analysis on the multi-dimensional code features by using a large language model, identifying potential defect types and variation rules, predicting the test efficiency of variants in combination with a deep Q learning model, and generating to-be-processed variants; performing grammar check and equivalence analysis on the to-be-processed variants to obtain effective variants, and testing the effective variants; variation test indexes are calculated, code weak points are positioned, and test blind areas are identified according to survival variants, so that a visual analysis report is generated; and iteratively generating a new test case according to the current survival variant and the visual analysis report, and testing the current survival variant by using the new test case. According to the invention, the variation test efficiency can be improved.

The invention provides a Linux access control system based on attributes, and relates to the technical field of data access control. The system comprises a system monitor module, a data interaction module and a decision unit. The system monitor module collects attributes from a kernel and a user space and writes the attributes into the data interaction module; the access decision unit compiles the access control strategy into an eBPF program and mounts the eBPF program to a corresponding hook; executing the kernel to the hook, and triggering an eBPF program; an eBPF program queries a Flow rule; matching the attribute with the Flow rule, and if the matching is successful, executing a corresponding action; if all the Flow rules fail to match, executing a default action; the system can be expanded during operation, and can be loaded or unloaded based on dynamic loading characteristics and strategies of the eBPF program and the eBPF program during operation of the system, so that the problem that a kernel needs to be compiled in a traditional LSM scheme is solved; the method does not intrude the kernel, is completely based on an eBPF program, does not modify a kernel source code, and can guarantee the stability and compatibility.

The invention provides a distributed storage method based on source code semantic partitioning, and particularly relates to the technical field of cloud data distributed storage. The method comprises the steps of performing semantic partitioning on a source code, and segmenting the source code into a plurality of semantic blocks according to dimensions such as functional semantics, an abstract syntax tree structure, author information and version information; generating metadata containing information such as grammar type tags, file paths, line number ranges, author identifiers, version identifiers and access popularity for each semantic block; constructing a weighted directed acyclic graph (DAG) based on the semantic chunks and the dependency relationship thereof; superposing a metadata layer in the DAG structure, and recording information such as function call dependency, inter-block reference relationship and version evolution chain; blocks with relatively high access frequency and close semantics are aggregated into super blocks, the traversal depth is reduced, and meanwhile, hot data and cold data are differentiated for hierarchical storage by adopting a cold and hot data management strategy; and evaluating a parent block aggregation degree through a BDS algorithm, determining a block sorting priority, and optimizing super block boundary division. Compared with the prior art, the method has the advantages that the semantic retrieval efficiency, the incremental updating capability and the distributed query performance of the source code storage system are improved.

The invention discloses a multi-mode fusion product document and source code association retrieval method based on a knowledge graph, and relates to the technical field of software engineering and artificial intelligence. The method comprises the steps that source codes are preprocessed, and code structure information and business semantics are mapped in combination with a predefined business term dictionary; performing controlled induction on a code file and a product document by utilizing a large model, extracting business terms, logic intentions and a subject relationship, fusing with original codes, and establishing a vector retrieval index system; further analyzing a code structure by using an abstract syntax tree, and extracting an entity and a calling relationship; semantic enhancement and relation normalization are performed in combination with the large model, entities and relations are stored in a graph database, and a knowledge graph is formed; and performing parallel processing on user query based on a full-text retrieval index, a vector retrieval index system and a knowledge graph, and finally generating a product concept. According to the method, the retrieval speed, the semantic depth and the logical reasoning ability can be considered at the same time, and the retrieval accuracy is improved.

The invention discloses a vulnerability hidden danger intelligent detection method based on a large model, and the method comprises the steps: firstly carrying out the global static analysis of a source code set, constructing a complete call graph and a complete data flow graph of a program, and forming a structured code knowledge graph; and then, aiming at the identified candidate vulnerability slices, based on the maps, carrying out accurate context retrieval and enhancement, converting key information such as a call chain and a data traceability path which are strongly related to the vulnerability slices into natural language description which can be understood by a large language model, and injecting the natural language description into cue words, so that missing global context information is provided for the model. And the defect of complex code analysis capability is overcome. In this way, the problem that an attention mechanism loses efficacy in remote code association is solved, and the accuracy and reliability of vulnerability detection are remarkably improved.

The invention discloses a cross-chain smart contract vulnerability detection method and system based on multi-feature fusion learning. The method comprises the following steps: collecting a cross-chain smart contract vulnerability data set for cleaning and labeling; feature extraction is carried out from the source code and the byte code, an abstract syntax tree (AST) is extracted from the cleaned source code, a basic control flow graph (CFG) is extracted from the byte code, and a cross-chain control flow graph (xCFG) is constructed; carrying out feature representation on AST and xCFG, generating a graph vector through a graph neural network (GNN), generating a semantic vector through CodeBert, and fusing the semantic vector into a feature fusion vector; performing model training and detection, taking the generated vectors as training data and test data, obtaining a cross-chain smart contract vulnerability detection model by adopting Transform-FC model training data, and finally evaluating model performance through accuracy, recall rate, precision rate and F1 value. According to the method, the structural features and semantic features of the codes can be effectively fused, potential vulnerability information in the codes can be fully mined, the recognition capability of the model for cross-chain vulnerabilities can be enhanced, and the accuracy and reliability of the cross-chain vulnerability detection model can be improved, so that the security of a block chain system can be more efficiently guaranteed.

The invention relates to the technical field of electrical digital data processing, and discloses a source code security vulnerability semantic detection method based on a large language model, which comprises the following steps: analyzing a source code to be detected to extract execution path constraint features, and constructing an orthogonal feature base vector sequence through orthogonalization feature extraction; inputting the source code to be tested into the large language model to obtain an initial semantic tensor; orthogonal projection is carried out on the initial semantic tensor to a code security constraint subspace constructed by an orthogonal feature basis vector sequence, weighted aggregation is carried out in combination with attention weight distribution information entropy, and a refined semantic vector is generated; according to the hidden logic offset vulnerability recognition method, business semantic noise is eliminated by utilizing a logic subspace projection mechanism, the association between a detection conclusion and code execution logic is established, and the precision of recognizing hidden logic offset vulnerabilities is improved.

A system for automated code modification improves application performance in cloud environments by integrating telemetry analysis with large language model (LLM)-driven reasoning. The system collects contextual information about a target application, including metadata, source code, and configuration files, and correlates it with real-time telemetry data related to application performance. Based on this data, the system constructs a structured LLM prompt using a predefined schema, which is transmitted to an LLM. The prompt instructs the LLM to recommend modifications to source or configuration files that may enhance performance, along with natural language explanations for those recommendations. In response to receiving the LLM's response, the system extracts the proposed code or configuration changes and associated rationale, and presents them to a user via a client device interface.

The invention relates to an incidence relation determination method and device, computer equipment, a storage medium and a computer program product. Relates to the technical field of software engineering. The method comprises the following steps: constructing a code knowledge graph based on a source code of a to-be-processed project, and constructing a demand knowledge graph based on a demand document of the to-be-processed project; mining historical data of the to-be-processed project, establishing a tracking link between the code knowledge graph and the demand knowledge graph, and generating a unified knowledge graph; receiving a query request of a user, and performing retrieval in the unified knowledge graph based on the query request to obtain structured context information; and obtaining enhanced prompt information based on the structured context information and a preset prompt template, sending the enhanced prompt information to the large language model, and outputting target result information corresponding to the query request based on the large language model. By adopting the method, the efficiency of determining the incidence relation between the software requirement and the source code can be improved.

Systems, methods, and frameworks for detecting malicious WebAssembly (Wasm) modules under source code obfuscation are provided. The system is configured to accurately identify malicious behavior in Wasm modules irrespective of the specific malicious functionality and in the presence of source code obfuscation techniques. The detection process leverages a Vision Transformer (ViT) model to classify a Wasm module as benign or malicious, enabling robust identification of threats across diverse attack patterns. The system operates with substantially low runtime overhead on computing resources, making it suitable for integration into real-time web application environments.

The invention discloses a gallery integrated internal production software system based on a modular low-coupling architecture, which is characterized in that a system function is divided into a plurality of modularized modules and the modularized modules are packaged and deployed by a uniform interface, so that the coupling degree between the modules is remarkably reduced, and the problem of global code change caused by module dependence in a traditional single architecture is avoided; direct calling is replaced by an event-driven mechanism, asynchronous communication and decoupling cooperation between modules are realized, and the stability and maintainability of the system during function change or addition are improved; the configuration driving mechanism enables the business process to be dynamically adjusted, different business requirements can be met without modifying a program source code, the plug-in management mechanism provides a standardized third-party extension access channel and supports function loading according to requirements, and the limitation that a traditional system is fixed in function and closed in development is broken through; according to the method, the software can run consistently in Windows, Linux, MacOS and other environments, and the key problems that in the prior art, the coupling degree is high, the expansibility is poor, configuration is not flexible, and the platform adaptation capacity is weak can be effectively solved.

The present application discloses a test code repairing method applied to a code development platform. The method comprises: obtaining a test code corresponding to a source code, and then executing the test code to obtain execution information of the test code, wherein the execution information comprises abnormal stack tracking information output during execution of the test code; on the basis of the execution information, performing fault localization on the test code to obtain location information of a faulty code; on the basis of the location information of the faulty code, extracting context information, wherein the context information comprises at least one of a faulty test case, a fault description, or the faulty content; and inputting a prompt constructed on the basis of the context information into a language model and performing inference, so as to obtain a first repaired code. The method is used to perform fault localization in light of the execution information, extract the context information on the basis of the location information of the faulty code, and, on the basis of the context information, generate accurate and complex repaired code via an advanced language model, thereby adapting to various complex fault scenarios and improving repair efficiency and accuracy.

The invention discloses an automatic compiling and adapting method for an RISC-V extension instruction, and belongs to the technical field of compilers. According to the method, a dynamic DSL (Digital Subscriber Line) for registering a custom instruction, adding register use constraints and defining a specific code mode is designed. The LLVM plug-in is used for automatically integrating the registered custom instruction in the compiling process. The invention relates to a self-defined instruction rapid adaptation mechanism which is specially provided for a continuously provided RISC-V self-defined instruction expansion scene, and by automatically generating correct assembly codes of registered self-defined instructions, correct registers are automatically distributed and reserved according to register use constraints; the method comprises the following steps of: searching a defined specific code mode and semantics, and automatically generating and inserting a registered custom instruction in a program, so as to realize the rapid adaptation of a compiler to an RISC-V custom extension instruction and the automatic use of a program code to the custom instruction, and the whole process does not need a developer to manually modify the compiler or a program source code.

The invention relates to the technical field of computer software engineering and cross-platform development, in particular to a system for assisting in transplanting Android language to ArkTS (ArkTS) of the swan Mongolia, which comprises a code input module for acquiring Java and Kotlin double-language source codes, an analysis module for analyzing codes by using an improved grammar analysis algorithm, and a storage module for storing the codes. The translation module constructs an abstract syntax tree based on an analysis result and generates an attribute description array, and the generation module generates an ArkTS interface code according to the attribute description array; the distributed computing architecture realizes efficient task scheduling and processing, and the post-processing optimization module guarantees the code quality. Through multi-module cooperation, the probability-rule fusion algorithm, the type dynamic mapping and other technologies, code transplantation can be rapidly and accurately completed, the large project transplantation period is shortened from several weeks to several days, the manual correction cost is reduced, the code conversion accuracy and the system stability are improved, and the development of the wide-gap application ecology is powerfully promoted.

Systems, methods, and software are disclosed herein for resolving coding issues via generative AI integrations in various implementations. In an implementation, in a debugging session, a computing apparatus receives a user query relating to an exception in source code. The computing apparatus elicits a response from a generative AI model which is tasked with identifying an interaction pattern for resolving the user query. The computing apparatus mediates the debugging session according to the interaction pattern identified by the generative AI model.

The invention discloses a dynamic script compiling and hot updating system based on Grouping and an implementation method of the dynamic script compiling and hot updating system. The system comprises a script source code management module, a dynamic compiling engine, an intelligent cache manager, an exception handling and recovery system and a hot update controller. And the script source code management module receives and preprocesses the Grouping script to generate a unique identifier for subsequent management. And the dynamic compilation engine executes compilation operation according to the identifier to ensure that a compilation result accords with a specification. And the intelligent cache manager efficiently stores and retrieves the compiling result, so that the repeated compiling cost is reduced. And the exception handling and recovery system monitors the execution state in real time, and automatically starts a recovery process in case of exception to guarantee stable operation of the system. The hot update controller realizes seamless update and version switching of scripts, and ensures service continuity. Through cooperative work of the modules, high-reliability, high-performance and zero-shutdown deployment is realized.

The invention relates to a computer code vulnerability detection method and system based on artificial intelligence, and the method comprises the steps: obtaining a detection demand input by a user, analyzing the detection demand based on a natural language processing algorithm, and extracting a target source code set corresponding to the detection demand from a to-be-detected code warehouse; performing standardization processing on the target source code set, and constructing a code feature data set; inputting the code feature data set into the trained vulnerability detection model, identifying to obtain a vulnerability code snippet, and generating a vulnerability score and a vulnerability type; and grading the vulnerability code snippets according to the vulnerability scores, generating repair suggestions in combination with vulnerability types, and outputting a corresponding detection report which comprises risk levels and the repair suggestions. The method has the effect of improving the accuracy of vulnerability detection.

The invention relates to the technical field of computers, and discloses a data control method and system, electronic equipment and a storage medium, and the method comprises the steps: receiving a data control strategy defined by a data owner, and the data control strategy is constructed based on a quintuple framework and comprises a subject, an object, an environment condition, an operation behavior and an effect; compiling the data control strategy into an intelligent contract code, and generating a source code based on an intelligent contract template; deploying the smart contract code to a block chain network to form a decentralized strategy decision point; intercepting the data access request, triggering the smart contract to verify the access request, and generating an access credential when the verification is passed; and allowing data access based on the access credential, and monitoring a data use behavior to ensure consistency with the data control strategy. According to the method, the fine granularity and the whole-process coverage of data control can be improved, the auditing credibility can be improved, the automation level and the efficiency of a control system can be improved, and the end-to-end safety guarantee capability is enhanced.

The invention discloses an aviation airborne software test case intelligent generation and closed-loop optimization method, which comprises the following steps of: knowledge graph construction: analyzing a DO-178C standard document and a related field document, extracting entities and relationships defined in the DO-178C standard document and the related field document, and constructing a field knowledge graph fused with DO-178C standard knowledge; initial test case generation: based on the domain knowledge graph, combining a static analysis result of the source code of the tested airborne software, and utilizing a large language model to drive and generate an initial test case set; and closed-loop iterative optimization: executing the test case, evaluating whether the structural coverage rate reaches the standard or not, automatically identifying uncovered codes when the structural coverage rate does not reach the standard, generating a supplementary test case for iterative optimization, and outputting a final test case set until a coverage rate target corresponding to the software security level is met. According to the method, the test quality and efficiency of the aviation airborne software can be improved.

The invention discloses a method and equipment for generating visual dragging interface elements, and relates to the technical field of interface element generation. The visual dragging interface element generation method comprises the following steps: acquiring an element attribute set of each interface element control in an atomic component library stored in a database; the method comprises the following steps: reading an interface element attribute set of each dragging connection of a user, and analyzing based on a pre-trained semantic fusion model to obtain a compatible adaptation index of each dragging connection of the user, and judging whether each dragging connection of the user has logic incompatibility or not based on the compatible adaptation index; if logic incompatibility exists, complementation processing is carried out based on a pre-trained missing reasoning model; and if the logic incompatibility does not exist, generating a corresponding front-end source code based on the interface layout after the user drags and connects every time until the composite component is completed, so that the logic integrity guarantee and interaction connectivity enhancement of the control connection are realized, and the intelligence and robustness of the construction of the composite component are improved.

The invention relates to code verification, in particular to a code and document consistency reasoning verification system based on a cross-modal logic atlas, which comprises an input layer for receiving source codes and software documents; the feature extraction layer is used for performing feature extraction on the source code and the software document; the abstraction layer is used for converting the extracted features into comparable intermediate representations; the unified modeling layer is used for mapping code logic and document semantics into a unified atlas structure and performing formalized representation by using description logic to obtain a cross-modal logic atlas; the reasoning verification layer is used for performing reasoning verification on the consistency of the code and the document according to the cross-modal logic graph; the result processing layer is used for judging a verification result according to the reasoning verification condition, starting a contradiction positioning mechanism when inconsistency is found, and carrying out contradiction positioning and report generation to obtain an interpretable report; according to the technical scheme provided by the invention, the defects that the consistency between the code and the document is difficult to accurately verify, and accurate contradiction positioning and an interpretable report are difficult to provide can be effectively overcome.

The invention discloses a multi-version upgrading method and device based on distribution, equipment and a medium, and relates to the technical field of distribution. The method comprises the following steps: in response to a version upgrading operation event of a target object, performing metadata marking, multi-modal verification and increment extraction on the target object to obtain version upgrading data and a version upgrading type of the target object; wherein the target object comprises system data, a second-open script and an application source code; acquiring a baseline version of the target object from a multi-mode version database according to a version identifier in the version upgrading data; based on the version upgrading type, determining a target version of the target object according to the version upgrading data and the baseline version; and performing compatibility verification on the baseline version and the target version to obtain a compatibility evaluation report of the target version, and deploying the target version according to the compatibility evaluation report. According to the technical scheme, the reliability and efficiency of system version iteration can be improved.

A software package is received and unpacked into multiple components comprising plural functions. Each function is lifted from machine code into static single-assignment intermediate representation and tokenized to produce semantics-preserving embeddings. Intermediate-representation data-flow features are extracted, including detection of constant static variables on a stack, stack reaching definitions, uninitialized variables, and intra-procedural aliases. For each component, the embeddings and features are input to a machine-learning model trained on semantic properties derived from a corpus of software packages to generate a software supply chain risk level. Data characterizing the risk level is provided to a consuming application. When the risk level satisfies a remediation criterion, a remediation action is initiated, including generation of a source-code patch recommendation for an identified root-cause function, insertion of a runtime guard into the component, or issuance of a security advisory for distribution to a security operations dashboard.

The invention provides a context enhanced vulnerability detection method based on a large language model, and belongs to the technical field of code security detection. Comprising the following steps: S1, data preprocessing: determining a code analysis range and preprocessing code data; s2, abstract extraction of the primitive API: executing cross-function deep analysis on the basis of code representation obtained by data preprocessing, and extracting an abstract used by the primitive API as context enhancement information of vulnerability detection. And S3, large language model vulnerability detection: inputting the source code of the target function and the additional primitive API abstract into the large language model as prompts, and carrying out automatic vulnerability detection and judgment. According to the method, the accuracy of cross-function vulnerability detection is greatly improved, analysis noise and resource consumption are effectively reduced, and the code vulnerability reasoning capability of a large language model is remarkably enhanced.

The invention belongs to the technical field of vulnerability detection, and particularly relates to a source code vulnerability detection method and system based on semantic comparative learning. Comprising the steps of obtaining source codes, preprocessing the source codes, and generating positive and negative samples paired with the source codes; improving the CodeBERT model to obtain an encoder, and building a momentum contrast learning model comprising a vulnerability classification branch, a representation consistency branch and a contrast learning branch based on the obtained encoder; training the momentum contrast learning model comprising the three branches by adopting a contrast learning method; and based on the trained momentum contrast learning model, performing vulnerability detection on a to-be-analyzed code. According to the method, a semantic contrast learning-driven source code vulnerability detection framework is designed and realized, and the problems of limitation of traditional static analysis and insufficient generalization ability of an existing deep learning model are solved by learning representation which is robust to code semantic changes and sensitive to vulnerability modes.

Access to log event data and corresponding source code is obtained and static code analysis is performed on the source code to produce analysis output. First vectors representing the log event data and second vectors representing the analysis output are generated. A similarity analysis is performed on the first vectors and the second vectors. A probabilistic relevance score associating a given log event with a segment of the source code is determined based on the similarity analysis. A visualization is generated for log events based on the probabilistic relevance score.