Výsledky vyhledávání - Theory of computation Semantics and reasoning Program reasoning Program analysis

PyCG: Practical Call Graph Generation in Python Autor Salis, Vitalis, Sotiropoulos, Thodoris, Louridas, Panos, Spinellis, Diomidis, Mitropoulos, Dimitris

“… We propose a pragmatic, static approach for call graph generation in Python. We compute all assignment relations between program identifiers of functions, variables, classes, and modules through an inter-procedural analysis…”
Získat plný text

S-gram: Towards Semantic-Aware Security Auditing for Ethereum Smart Contracts Autor Liu, Han, Liu, Chao, Zhao, Wenqi, Jiang, Yu, Sun, Jiaguang

“… (rely on pre-defined bug patterns) or very expensive (rely on program analysis), thus are insufficient for Ethereum…”
Získat plný text

Static Analysis of Remote Procedure Call in Java Programs Autor Cui, Baoquan, Qu, Rong, Tang, Zhen, Zhang, Jian

“… Since the RPC based programs/frameworks play a more important role in various domains, the static analysis of RPC is significant and cannot be ignored…”
Získat plný text

Context Debloating for Object-Sensitive Pointer Analysis Autor He, Dongjie, Lu, Jingbo, Xue, Jingling

“…We Introduce a new approach, Conch, for debloating contexts for all the object-sensitive pointer analysis algorithms developed for object-oriented languages, where the calling contexts of a method…”
Získat plný text

Module-Aware Context Sensitive Pointer Analysis Autor Li, Haofeng, Shi, Chenghang, Lu, Jie, Li, Lian, Zhao, Zixuan

“… However, existing pointer analyses fail to leverage the semantics of JPMS. This paper presents a novel module-aware approach to improving the performance of pointer analysis…”
Získat plný text

Boosting Path-Sensitive Value Flow Analysis Via Removal of Redundant Summaries Autor Wang, Yongchao, Cai, Yuandao, Zhang, Charles

“…Value flow analysis that tracks the flow of values via data dependence is a widely used technique for detecting a broad spectrum of software bugs…”
Získat plný text

Automated Third-Party Library Detection for Android Applications: Are We There Yet? Autor Zhan, Xian, Fan, Lingling, Liu, Tianming, Chen, Sen, Li, Li, Wang, Haoyu, Xu, Yifei, Luo, Xiapu, Liu, Yang

“…Third-party libraries (TPLs) have become a significant part of the Android ecosystem. Developers can employ various TPLs with different functionalities to…”
Získat plný text

Two Birds with One Stone: Multi-Derivation for Fast Context-Free Language Reachability Analysis Autor Shi, Chenghang, Li, Haofeng, Sui, Yulei, Lu, Jie, Li, Lian, Xue, Jingling

“…Context-free language (CFL) reachability is a fundamental framework for formulating program analyses…”
Získat plný text

Spatio-temporal context reduction: a pointer-analysis-based static approach for detecting use-after-free vulnerabilities Autor Yan, Hua, Sui, Yulei, Chen, Shiping, Xue, Jingling

“… We introduce a new pointer-analysis-based static analysis, CRed, for finding UAF bugs in multi-MLOC C source code efficiently and effectively…”
Získat plný text

Taming reflection: Aiding static analysis in the presence of reflection and custom class loaders Autor Bodden, Eric, Sewe, Andreas, Sinschek, Jan, Oueslati, Hela, Mezini, Mira

“…Static program analyses and transformations for Java face many problems when analyzing programs that use reflection or custom class loaders…”
Získat plný text

An Extensive Empirical Study of Nondeterministic Behavior in Static Analysis Tools Autor Miao, Miao, Mordahl, Austin, Soles, Dakota, Beideck, Alice, Wei, Shiyi

“… Static analysis tools exhibit many risk factors for nondeterministic behavior, but no work has analyzed the occurrence of such behavior in these tools…”
Získat plný text

VALAR: Streamlining Alarm Ranking in Static Analysis with Value-Flow Assisted Active Learning Autor Liu, Pengcheng, Lu, Yifei, Yang, Wenhua, Pan, Minxue

“… Meanwhile, the value-flows provide Valar with a concise and comprehensive summary of the operational semantics about programs…”
Získat plný text

ReuNify: A Step Towards Whole Program Analysis for React Native Android Apps Autor Liu, Yonghui, Chen, Xiao, Liu, Pei, Grundy, John, Chen, Chunyang, Li, Li

“… However, previous research and tools have overlooked this mechanism, resulting in incomplete analysis of React Native app code…”
Získat plný text

StubDroid: Automatic Inference of Precise Data-Flow Summaries for the Android Framework Autor Arzt, Steven, Bodden, Eric

“… Automated taint analyses address this problem by allowing users to detect and investigate how applications access and handle this data…”
Získat plný text

Interactive Cross-Language Pointer Analysis for Resolving Native Code in Java Programs Autor Zhang, Chenxi, Liang, Yufei, Tan, Tian, Xu, Chang, Kan, Shuangxiang, Sui, Yulei, Li, Yue

“… While JNI mechanism significantly enhances the Java platform's capabilities, it also presents challenges for static analysis of Java programs due to the complex behaviors introduced by native code…”
Získat plný text

Predicting accurate and actionable static analysis warnings: an experimental approach Autor Ruthruff, Joseph R, Penix, John, Morgenthaler, J David, Elbaum, Sebastian, Rothermel, Gregg

“…Static analysis tools report software defects that may or may not be detected by other verification methods…”
Získat plný text

PacDroid: A Pointer-Analysis-Centric Framework for Security Vulnerabilities in Android Apps Autor Chen, Menglong, Tan, Tian, Pan, Minxue, Li, Yue

“…General frameworks such as FlowDroid, IccTA, P/Taint, Amandroid, and DroidSafe have significantly advanced the development of static analysis tools for Android security by providing fundamental facilities…”
Získat plný text

Persisting and Reusing Results of Static Program Analyses on a Large Scale Autor Dusing, Johannes, Hermann, Ben

“…Static Program Analysis (SPA) has long been established as an important technique for gaining insights into software systems…”
Získat plný text

Merge-Replay: Efficient IFDS-Based Taint Analysis by Consolidating Equivalent Value Flows Autor Gui, Yujiang, He, Dongjie, Xue, Jingling

“…The IFDS-based taint analysis employs two mutually iterative passes: a forward pass that identifies taints and a backward pass that detects aliases…”
Získat plný text

Boosting the Performance of Multi-Solver IFDS Algorithms with Flow-Sensitivity Optimizations Autor Li, Haofeng, Lu, Jie, Meng, Haining, Cao, Liqing, Li, Lian, Gao, Lin

“…The IFDS (Inter-procedural, Finite, Distributive, Subset) algorithms are popularly used to solve a wide range of analysis problems…”
Získat plný text