https://github.com/chains-project/ddc4j

Diverse double compiling for Java. Bachelor thesis Elias and Eskil.

https://github.com/chains-project/ddc4j

Science Score: 57.0%

This score indicates how likely this project is to be science-related based on various indicators:

  • CITATION.cff file
  • codemeta.json file
    Found codemeta.json file
  • .zenodo.json file
    Found .zenodo.json file
  • DOI references
    Found 1 DOI reference(s) in README
  • Academic publication links
    Links to: ieee.org, acm.org
  • Committers with academic emails
  • Institutional organization owner
    Organization chains-project has institutional domain (chains.proj.kth.se)
  • JOSS paper metadata
  • Scientific vocabulary similarity
    Low similarity (4.9%) to scientific vocabulary
Last synced: 6 months ago · JSON representation

Repository

Diverse double compiling for Java. Bachelor thesis Elias and Eskil.

Basic Info
  • Host: GitHub
  • Owner: chains-project
  • License: mit
  • Language: Shell
  • Default Branch: main
  • Homepage:
  • Size: 6.16 MB
Statistics
  • Stars: 0
  • Watchers: 6
  • Forks: 0
  • Open Issues: 0
  • Releases: 0
Created over 1 year ago · Last pushed 6 months ago
Metadata Files
Readme License

README.md

DDC4j

Students: Elias Lundell, Eskil Nyberg

Supervisor: Aman Sharma, Examiner: Martin Monperrus


A Degree Project, First Cycle, to perform Diverse Double-Compiling (DDC) for Java. The project implemented DDC for the javac compiler and used it to verify a release of the JDK: Temurin 21.0.5-ga. Note that, since there exists no truly trusted compiler in the Java ecosystem, this verification only supports the hypothesis that Temurin's release of the JDK is not infected by a trusting trust attack - it does not prove it.

The project's corresponding thesis is available at this link: [LINK TBA].

Reproducing our work

If you are interested in reproducing our work, feel free to take a look at our implementations in Docker (for typical use-cases) or in Red Hat Enterprise Linux (RHEL) for the verification of Temurin.

Related Work

Owner

  • Name: CHAINS research project at KTH Royal Institute of Technology
  • Login: chains-project
  • Kind: organization

"Consistent Hardening and Analysis of Software Supply Chains" at KTH, funded by SSF

GitHub Events

Total
  • Member event: 2
  • Push event: 68
  • Create event: 4
Last Year
  • Member event: 2
  • Push event: 68
  • Create event: 4

Committers

Last synced: 11 months ago

All Time
  • Total Commits: 36
  • Total Committers: 2
  • Avg Commits per committer: 18.0
  • Development Distribution Score (DDS): 0.111
Past Year
  • Commits: 36
  • Committers: 2
  • Avg Commits per committer: 18.0
  • Development Distribution Score (DDS): 0.111
Top Committers
Name Email Commits
Elias Lundell e****3@g****m 32
rfyuz e****g@g****m 4

Issues and Pull Requests

Last synced: 11 months ago

All Time
  • Total issues: 0
  • Total pull requests: 0
  • Average time to close issues: N/A
  • Average time to close pull requests: N/A
  • Total issue authors: 0
  • Total pull request authors: 0
  • Average comments per issue: 0
  • Average comments per pull request: 0
  • Merged pull requests: 0
  • Bot issues: 0
  • Bot pull requests: 0
Past Year
  • Issues: 0
  • Pull requests: 0
  • Average time to close issues: N/A
  • Average time to close pull requests: N/A
  • Issue authors: 0
  • Pull request authors: 0
  • Average comments per issue: 0
  • Average comments per pull request: 0
  • Merged pull requests: 0
  • Bot issues: 0
  • Bot pull requests: 0
Top Authors
Issue Authors
Pull Request Authors
Top Labels
Issue Labels
Pull Request Labels

Dependencies

docker-compose.yml docker
ubuntu/Dockerfile docker
  • ubuntu 22.04 build