Skip to content

Commit 51d9498

Browse files
committed
Improve README for replication package
- Add clear description of study and tools - List included artifacts (results, raw data, code) - Add repository structure overview - Include citation placeholder - Better explain analysis outputs
1 parent d5bca22 commit 51d9498

1 file changed

Lines changed: 51 additions & 3 deletions

File tree

README.md

Lines changed: 51 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,19 @@
1-
# Go CryptoAPI Analysis
1+
# Crypto API Misuse Detectors for Go - Replication Package
22

3-
Replication package for Go cryptographic API tool analysis study.
3+
This repository contains the complete replication package for a comparative study of static analysis tools detecting cryptographic API misuse in Go projects.
4+
5+
**Tools compared:** CodeQL, Gosec, Gopher, Snyk
6+
7+
**Dataset:** 329 open-source Go projects analyzed for crypto API misuse patterns
8+
9+
**Included in this package:**
10+
- 📊 Complete analysis results (`results/` directory)
11+
- 14 rule-specific Venn diagrams + overall tool consensus
12+
- Rule-level metrics and sampling data
13+
- 🔬 Raw tool outputs (`raw_results/` - 206MB, 329 projects)
14+
- 🐍 Python analysis code (`src/tool_consensus/`)
15+
- 🐳 Docker composition tooling for running experiments
16+
- 📝 Experiment orchestration scripts
417

518
## Composer
619

@@ -29,6 +42,8 @@ go run cmd/compose/main.go -tools <toolname> -verbose <datasetpath>
2942

3043
## Analysis
3144

45+
Analyze tool consensus and generate Venn diagrams from results.
46+
3247
**Setup:**
3348
```bash
3449
pip install -r src/requirements.txt
@@ -37,4 +52,37 @@ pip install -r src/requirements.txt
3752
**Run:**
3853
```bash
3954
uv run analyze-results raw_results --output-dir ./analysis_output
40-
```
55+
```
56+
57+
**Output:** Venn diagrams, metrics, and sampled findings in `analysis_output/`
58+
59+
## Pre-computed Results
60+
61+
Analysis results are already included in the `results/` directory:
62+
- `venn_diagrams/` - Visual tool overlap analysis
63+
- `rule_analysis/` - Per-rule metrics and findings
64+
65+
## Repository Structure
66+
67+
```
68+
.
69+
├── cmd/ # Compose file generator
70+
├── data/ # Dataset metadata
71+
├── internal/ # Tool configurations and Docker setup
72+
├── scripts/ # Experiment orchestration
73+
├── src/ # Python analysis code
74+
├── raw_results/ # Tool outputs (329 projects)
75+
└── results/ # Pre-computed analysis
76+
```
77+
78+
## Citation
79+
80+
If you use this replication package, please cite:
81+
82+
```
83+
[Add your paper citation here]
84+
```
85+
86+
## License
87+
88+
MIT License - See LICENSE file for details

0 commit comments

Comments
 (0)