Package org.eclipse.steady.sign

Interface SignatureComparator

  • public interface SignatureComparator
    A measure to express the similarity of constructs signatures. The similarity measure is used to understand whether different releases compared to each other are within the so-called stability range.

    • Method Detail

      • computeSimilarity

        float computeSimilarity​(Signature _a,
                        Signature _b)
        Returns a value indicating the similarity of the two signatures provided as argument. A value of 1 means that the signatures are identical, a value of 0 means that they do not have anything in common.
        Parameters:
        _a - a Signature object.
        _b - a Signature object.
        Returns:
        a float.

      • computeChange

        SignatureChange computeChange​(Signature _a,
                              Signature _b)
        Compares the signature at hand with the signature provided as argument and computes a so-called signature change, i.e., a set of modifications that transforms one signature into the other one. This method may be applied to the vulnerable and fixed version of all programming constructs touched as part of a security fix.
        Parameters:
        _a - a Signature object.
        _b - a Signature object.
        Returns:
        the set of modifications required to transform one signature into the other one

      • containsChange

        boolean containsChange​(Signature _s,
                       SignatureChange _change)
        Returns true if the code modifications expressed by the signature change are contained in the signature at hand, false otherwise. In other words, applied to the Vulas use-case, one could check whether a signature part of an application under analysis is vulnerable or not.
        Parameters:
        _change - the signature change to be searched for
        _s - a Signature object.
        Returns:
        a boolean.