论文标题
驱动器：Dockerfile规则挖掘和违规检测
DRIVE: Dockerfile Rule Mining and Violation Detection
论文作者
论文摘要
Dockerfile定义了一组指令来构建Docker映像，然后可以对其进行实例化以支持容器化的应用程序。最近的研究表明，Dockerfiles有很多质量问题。在本文中，我们提出了一种新颖的方法驱动器（Dockerfiles规则采矿和违规发现），以挖掘隐性规则，并检测到Dockerfiles中对此类规则的潜在违规行为。驱动器首先解析dockerfiles并将其转换为中间表示。然后，它利用有效的顺序模式挖掘算法来提取潜在模式。通过基于启发式的减少和中度的人干预，可以确定潜在的规则，然后可以利用这些规则来检测对Dockerfile的潜在侵犯。 Drive标识了34条语义规则和19条句法规则，其中包括9个新的语义规则，这些规则尚未在其他地方报告。对现实世界码头鱼的广泛实验证明了我们方法的功效。
A Dockerfile defines a set of instructions to build Docker images, which can then be instantiated to support containerized applications. Recent studies have revealed a considerable amount of quality issues with Dockerfiles. In this paper, we propose a novel approach DRIVE (Dockerfiles Rule mIning and Violation dEtection) to mine implicit rules and detect potential violations of such rules in Dockerfiles. DRIVE firstly parses Dockerfiles and transforms them to an intermediate representation. It then leverages an efficient sequential pattern mining algorithm to extract potential patterns. With heuristic-based reduction and moderate human intervention, potential rules are identified, which can then be utilized to detect potential violations of Dockerfiles. DRIVE identifies 34 semantic rules and 19 syntactic rules including 9 new semantic rules which have not been reported elsewhere. Extensive experiments on real-world Dockerfiles demonstrate the efficacy of our approach.
