@inproceedings{10.1145/2786805.2786829,
author = {Hermann, Ben and Reif, Michael and Eichberg, Michael and Mezini, Mira},
title = {Getting to Know You: Towards a Capability Model for Java},
year = {2015},
isbn = {9781450336758},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/2786805.2786829},
doi = {10.1145/2786805.2786829},
abstract = { Developing software from reusable libraries lets developers face a security dilemma: Either be efficient and reuse libraries as they are or inspect them, know about their resource usage, but possibly miss deadlines as reviews are a time consuming process. In this paper, we propose a novel capability inference mechanism for libraries written in Java. It uses a coarse-grained capability model for system resources that can be presented to developers. We found that the capability inference agrees by 86.81% on expectations towards capabilities that can be derived from project documentation. Moreover, our approach can find capabilities that cannot be discovered using project documentation. It is thus a helpful tool for developers mitigating the aforementioned dilemma. },
booktitle = {Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering},
pages = {758–769},
numpages = {12},
keywords = {library, analysis, security, reuse, capability},
location = {Bergamo, Italy},
series = {ESEC/FSE 2015}
}