Access right contradiction detection apparatus and analysis rule creation apparatus
AssigneeFujitsu Limited
InventorsHisashi Kojima, Satoru Torii
Life of this patent
Estimating the term…
Abstract
Method signatures included in an input program are detected. An access analyzer sequentially analyzes the method signatures and obtains a run-time access right list based on a rule. This rule specifies method signatures and the access rights which may possibly be included in the program so that the method signatures correspond to the access rights, respectively. A comparator compares the run-time access right list with the design-time access right list in width of restriction based on another rule. This rule specifies widths related to restrictions of the access rights which may possibly be included in the program.
Claims22
An access right contradiction detection apparatus which detects, for a predetermined program which is executed based on access right restriction, a contradiction which occurs between a run-time access right list which is a collection of access rights used when the program is executed and a design-time access right list which is a collection of access rights granted when the program is designed, the apparatus comprising:
- a detection unit that analyzes a source code of the program, and which sequentially detects method signatures which are included in the program;
- an analysis unit that sequentially analyzes the method signatures detected by the detection unit and obtains the run-time access right list based on a predetermined rule which specifies method signatures and the access rights which may possibly be included in the program so that the method signatures correspond to the access rights, respectively;
- a comparison unit that compares the run-time access right list, which is obtained by the analysis unit, with the design-time access right list in width of restriction based on a predetermined comparison rule which specifies widths related to restrictions of the access rights which may possibly be included in the program;
- and
- a notification unit that notifies a comparison result of the comparison unit.
An analysis rule creation apparatus which creates, for a predetermined program which is executed based on access right restriction, a predetermined analysis rule which specifies method signatures and access rights which may be included in the program so that the method signatures correspond to the access rights, respectively, which apparatus comprises:
- a detection unit that analyzes a source code of the program, and which sequentially detects the method signatures which are included in the program;
- an analysis unit that, if the method signatures which are detected by the detection unit are already specified by the predetermined analysis rule, analyzes the specified method signatures and obtains the access rights, and which, if the method signatures which are detected by the detection unit are not specified by the predetermined analysis rule but the method signatures which are specified by the predetermined analysis rule are called internally, analyzes the method signatures which are called internally and obtains the access rights, respectively;
- and
- an analysis rule creation unit that, if the analysis unit analyzes the method signatures which are called internally and obtains the access rights, respectively, creates a new analysis rule which specifies the obtained access rights and the method signatures which are detected by the detection unit so that the obtained access rights correspond to the detected method signatures, respectively.
An access right contradiction detection method of detecting, for a predetermined program which is executed based on access right restriction, a contradiction which occurs between a run-time access right list which is a collection of access rights used when the program is executed and a design-time access right list which is a collection of access rights granted when the program is designed, the method comprising:
- a detection step of analyzing a source code of the program, and sequentially detecting method signatures which are included in the program;
- an analysis step of sequentially analyzing the method signatures detected at the detection step and obtaining the run-time access right list based on a predetermined rule which specifies method signatures and the access rights which may possibly be included in the program so that the method signatures correspond to the access rights, respectively;
- a comparison step of comparing the run-time access right list, which is obtained at the analysis step, with the design-time access right list in width of restriction based on a predetermined comparison rule which specifies widths related to restrictions of the access rights which may possibly be included in the program;
- and
- a notification step of notifying a comparison result at the comparison step.
An analysis rule creation method of creating, for a predetermined program which is executed based on access right restriction, a predetermined analysis rule which specifies method signatures and access rights which may be included in the program so that the method signatures correspond to the access rights, respectively, the method comprising:
- a detection step of analyzing a source code of the program, and sequentially detecting the method signatures which are included in the program;
- an analysis step of, if the method signatures which are detected at the detection step are already specified by the predetermined analysis rule, analyzing the specified method signatures and obtaining the access rights, and of, if the method signatures which are detected at the detection step are not specified by the predetermined analysis rule but the method signatures which are specified by the predetermined analysis rule are called internally, analyzing the method signatures which are called internally and obtaining the access rights, respectively;
- and
- an analysis rule creation step of, if the method signatures which are called internally are analyzed and the access rights are obtained, respectively at the analysis step, creating a new analysis rule which specifies the obtained access rights and the method signatures which are detected at the detection step so that the obtained access rights correspond to the detected method signatures, respectively.
A computer program which allows a computer to execute an access right contradiction detection method of detecting, for a predetermined program which is executed based on access right restriction, a contradiction which occurs between a run-time access right list which is a collection of access rights used when the program is executed and a design-time access right list which is a collection of access rights granted when the program is designed, the method comprising:
- a detection step of analyzing a source code of the program, and sequentially detecting method signatures which are included in the program;
- an analysis step of sequentially analyzing the method signatures detected at the detection step and obtaining the run-time access right list based on a predetermined rule which specifies method signatures and the access rights which may possibly be included in the program so that the method signatures correspond to the access rights, respectively;
- a comparison step of comparing the run-time access right list, which is obtained at the analysis step, with the design-time access right list in width of restriction based on a predetermined comparison rule which specifies widths related to restrictions of the access rights which may possibly be included in the program;
- and
- a notification step of notifying a comparison result at the comparison step.
A computer program which allows a computer to execute analysis rule creation method of creating, for a predetermined program which is executed based on access right restriction, a predetermined analysis rule which specifies method signatures and access rights which may be included in the program so that the method signatures correspond to the access rights, respectively, the method comprising:
- a detection step of analyzing a source code of the program, and sequentially detecting the method signatures which are included in the program;
- an analysis step of, if the method signatures which are detected at the detection step are already specified by the predetermined analysis rule, analyzing the specified method signatures and obtaining the access rights, and of, if the method signatures which are detected at the detection step are not specified by the predetermined analysis rule but the method signatures which are specified by the predetermined analysis rule are called internally, analyzing the method signatures which are called internally and obtaining the access rights, respectively;
- and
- an analysis rule creation step of, if the method signatures which are called internally are analyzed and the access rights are obtained, respectively at the analysis step, creating a new analysis rule which specifies the obtained access rights and the method signatures which are detected at the detection step so that the obtained access rights correspond to the detected method signatures, respectively.
Dependencies are inferred from the claim text.