Question about the input of susi

[jxnu707]

hi, in SourceSinkFinder.main() there is a statement like: System.out.println("Usage: java de.ecspride.sourcesinkfinder.SourceSinkFinder " + "<androidJAR> ...<inputN> <outputFile>"); So what exactly is the input1...inputN,? Is it some text file form?

[srasthofer]

Susi needs an annotated file with source sink annotations for methods. These annotations are then taken to train the learner. For instance, if you want to flag the getDeviceId and getLine1Number methods as a source, you can do this with the following:

<android.telephony.TelephonyManager: java.lang.String getDeviceId()> -> _SOURCE_
<android.telephony.TelephonyManager: java.lang.String getLine1Number()> -> _SOURCE_
</code>
...

for sinks you take the "-> _SINK" annotation and for methods that are neither, you take "-> NONE"