论文标题
部分可观测时空混沌系统的无模型预测
A Language-Independent Analysis Platform for Source Code
论文作者
论文摘要
在本文中，我们介绍了CPG分析平台，该平台可以基于代码属性图将源代码转换为与编程语言无关的表示。这使安全专家和开发人员可以捕获语言级别的语义，以进行安全分析或识别有关代码合规性的模式。通过使用模糊解析，也可以分析以不同的编程语言编写的不完整或不兼容的代码。该平台包括一个分析库和界面以查询，与源代码图进行查询，交互或可视化。这组CPG工具允许在异质软件环境中找到常见的弱点，而与基础编程语言无关。
In this paper, we present the CPG analysis platform, which enables the translation of source code into a programming language-independent representation, based on a code property graph. This allows security experts and developers to capture language level semantics for security analyses or identify patterns with respect to code compliance. Through the use of fuzzy parsing, also incomplete or non-compilable code, written in different programming languages, can be analyzed. The platform comprises an analysis library and interfaces to query, interact with or visualize source code graphs. This set of CPG tools allows finding common weaknesses in heterogeneous software environments, independently of the underlying programming language.
