Filters








370 Hits in 2.7 sec

Interprocedural Data Flow Analysis in Soot using Value Contexts [article]

Rohan Padhye, Uday P. Khedker
2013 arXiv   pre-print
We describe a general-purpose interprocedural analysis framework for Soot using data flow values for context-sensitivity.  ...  An interprocedural analysis is precise if it is flow sensitive and fully context-sensitive even in the presence of recursion.  ...  Acknowledgments We would like to thank the anonymous reviewers for suggesting the inclusion of a non-distributive example and the separation of call/return flow functions.  ... 
arXiv:1304.6274v2 fatcat:rzu2ieverrae3eqtjdnl6olvuy

Interprocedural data flow analysis in Soot using value contexts

Rohan Padhye, Uday P. Khedker
2013 Proceedings of the 2nd ACM SIGPLAN International Workshop on State Of the Art in Java Program analysis - SOAP '13  
We describe a general-purpose interprocedural analysis framework for Soot using data flow values for context-sensitivity.  ...  An interprocedural analysis is precise if it is flow sensitive and fully context-sensitive even in the presence of recursion.  ...  Acknowledgments We would like to thank the anonymous reviewers for suggesting the inclusion of a non-distributive example and the separation of call/return flow functions.  ... 
doi:10.1145/2487568.2487569 dblp:conf/pldi/PadhyeK13 fatcat:dc4un3sgbvbjfmevyoo4iiryf4

A security policy oracle

Varun Srivastava, Michael D. Bond, Kathryn S. McKinley, Vitaly Shmatikov
2011 SIGPLAN notices  
Our flow-and contextsensitive analysis takes as input an API, multiple implementations thereof, and the definitions of security checks and security-sensitive events.  ...  Neither approach guarantees that the policy used for verification is correct. In this paper, we exploit the fact that many modern APIs have multiple, independent implementations.  ...  Acknowledgments Thanks to Andrew John Hughes for his generous help with verifying Classpath bugs and for feedback on the paper text; Sam Guyer for useful discussions about static analysis; and the anonymous  ... 
doi:10.1145/1993316.1993539 fatcat:57rls5e6v5e5vn2qddgou4mgl4

A security policy oracle

Varun Srivastava, Michael D. Bond, Kathryn S. McKinley, Vitaly Shmatikov
2012 SIGPLAN notices  
Our flow-and contextsensitive analysis takes as input an API, multiple implementations thereof, and the definitions of security checks and security-sensitive events.  ...  Neither approach guarantees that the policy used for verification is correct. In this paper, we exploit the fact that many modern APIs have multiple, independent implementations.  ...  Acknowledgments Thanks to Andrew John Hughes for his generous help with verifying Classpath bugs and for feedback on the paper text; Sam Guyer for useful discussions about static analysis; and the anonymous  ... 
doi:10.1145/2345156.1993539 fatcat:f52et4a7zjbn3lvmdnhjwtiuey

A security policy oracle

Varun Srivastava, Michael D. Bond, Kathryn S. McKinley, Vitaly Shmatikov
2011 Proceedings of the 32nd ACM SIGPLAN conference on Programming language design and implementation - PLDI '11  
Our flow-and contextsensitive analysis takes as input an API, multiple implementations thereof, and the definitions of security checks and security-sensitive events.  ...  Neither approach guarantees that the policy used for verification is correct. In this paper, we exploit the fact that many modern APIs have multiple, independent implementations.  ...  Acknowledgments Thanks to Andrew John Hughes for his generous help with verifying Classpath bugs and for feedback on the paper text; Sam Guyer for useful discussions about static analysis; and the anonymous  ... 
doi:10.1145/1993498.1993539 dblp:conf/pldi/SrivastavaBMS11 fatcat:v6mn2ea6cjf2pdspkwqcuvkqmi

A Practical MHP Information Analysis for Concurrent Java Programs [chapter]

Lin Li, Clark Verbrugge
2005 Lecture Notes in Computer Science  
MHP Analysis in the context of Soot Soot Framework Our implementation is based on Soot [22] , a free compiler infrastructure written in Java.  ...  A form of interprocedural value numbering analysis is thus required.  ... 
doi:10.1007/11532378_15 fatcat:3pmmt2w34badrn433ruarlkm5a

SVF: interprocedural static value-flow analysis in LLVM

Yulei Sui, Jingling Xue
2016 Proceedings of the 25th International Conference on Compiler Construction - CC 2016  
This paper presents SVF, a tool that enables scalable and precise interprocedural Static Value-Flow analysis for C programs by leveraging recent advances in sparse analysis.  ...  SVF accepts points-to information generated by any pointer analysis (e.g., Andersen's analysis) and constructs an interprocedural memory SSA form, in which the def-use chains of both top-level and address-taken  ...  WALA [23] is an open-source Java analysis framework that provides interprocedural data-flow analysis and a context-sensitive tabulation-based slicer.  ... 
doi:10.1145/2892208.2892235 dblp:conf/cc/SuiX16 fatcat:tlqxsdhduvgcvmqpsiew3eopve

Inter-procedural data-flow analysis with IFDS/IDE and Soot

Eric Bodden
2012 Proceedings of the ACM SIGPLAN International Workshop on State of the Art in Java Program analysis - SOAP '12  
In this work we describe our implementation of a generic IFDS/IDE solver on top of Soot and contrast it with an IFDS implementation in the Watson Libraries for Analysis (WALA), both from a user's perspective  ...  The IFDS and IDE frameworks by Reps, Horwitz and Sagiv are two general frameworks for the inter-procedural analysis of data-flow problems with distributive flow functions over finite domains.  ...  We thank Steven Fink for clarifications of some design decisions taken in WALA as well as Bruno Dufour and the anonymous reviewers for their constructive comments on an earlier draft of this paper.  ... 
doi:10.1145/2259051.2259052 dblp:conf/pldi/Bodden12a fatcat:rucg2lbflbe3rnfklcthd5ifre

Design your analysis: a case study on implementation reusability of data-flow functions

Johannes Lerch, Ben Hermann
2015 Proceedings of the 4th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis - SOAP 2015  
Therefore, in this paper we present a reference design for data flow analyses in the context of the IFDS/IDE algorithm.  ...  The development of efficient data flow analyses is a complicated task. As requirements change and special cases have to be considered, implementations may get hard to maintain, test and reuse.  ...  Both algorithms require an interprocedural control flow graph, which can be easily provided by most static analysis frameworks, e.g., Soot.  ... 
doi:10.1145/2771284.2771289 dblp:conf/pldi/LerchH15 fatcat:jkel22utvvg7lotig7zdut6ena

Abstracting Program Dependencies Using the Method Dependence Graph

Haipeng Cai, Raul Santelices
2015 2015 IEEE International Conference on Software Quality, Reliability and Security  
We also evaluate the cost-effectiveness of both approaches in the application context of impact analysis.  ...  proposed, yet most of them either target very specific clients or model partial dependencies only, while others have not been fully evaluated for their accuracy with respect to the TSD model, especially in  ...  The summary edges in the MDG are also different from those of the same name used in the SDG and ASDG: Those edges were used to help represent calling contexts in the SDG and transitive data-flow across  ... 
doi:10.1109/qrs.2015.18 dblp:conf/qrs/CaiS15 fatcat:c5crnvumbjeahkrgy343ka6ecy

EXPLORER : query- and demand-driven exploration of interprocedural control flow properties

Yu Feng, Xinyu Wang, Isil Dillig, Calvin Lin
2015 Proceedings of the 2015 ACM SIGPLAN International Conference on Object-Oriented Programming, Systems, Languages, and Applications - OOPSLA 2015  
Efficiency: Since our techniques are meant to be used in an interactive setting-for instance, in the context of an IDE-EXPLORER should be sufficiently fast to be used in real time.  ...  This paper describes a general framework-and its implementation in a tool called EXPLORER-for statically answering a class of interprocedural control flow queries about Java programs.  ...  Acknowledgments We thank Saswat Anand for his suggestion regarding our third experiment and Manu Sridharan for helping us add a new interface to his demand-driven pointer analysis in Soot.  ... 
doi:10.1145/2814270.2814284 dblp:conf/oopsla/FengWDL15 fatcat:yasiwxigqfaytnppktcmvjl7gi

Optimal and Perfectly Parallel Algorithms for On-demand Data-Flow Analysis [chapter]

Krishnendu Chatterjee, Amir Kafshdar Goharshady, Rasmus Ibsen-Jensen, Andreas Pavlogiannis
2020 Lecture Notes in Computer Science  
The most widely-used framework for interprocedural data-flow analysis is IFDS, which encompasses distributive data-flow functions over a finite domain.  ...  Interprocedural data-flow analyses form an expressive and useful paradigm of numerous static analysis applications, such as live variables analysis, alias analysis and null pointers analysis.  ...  for W in the context of data flow analysis.  ... 
doi:10.1007/978-3-030-44914-8_5 fatcat:a5jbi3gbordb3pxgpddbtr34ba

Program analysis and transformation for holistic optimization of database applications

Karthik Ramachandra, Ravindra Guravannavar, S. Sudarshan
2012 Proceedings of the ACM SIGPLAN International Workshop on State of the Art in Java Program analysis - SOAP '12  
DBridge implements these techniques for Java programs and internally uses Soot, a Java optimization framework, for static analysis and transformation.  ...  We then discuss the design and implementation of DBridge with a focus on how the Soot framework has been used to achieve these goals.  ...  Query anticipability analysis is a bit vector backward data flow framework with query execution statements being the data flow values. Genn is 1 at bit q if n is the query execution statement q.  ... 
doi:10.1145/2259051.2259057 dblp:conf/pldi/0002G012 fatcat:zke276t2rfcvbaf4bv6tvtrqlm

EXPLORER : query- and demand-driven exploration of interprocedural control flow properties

Yu Feng, Xinyu Wang, Isil Dillig, Calvin Lin
2015 SIGPLAN notices  
Efficiency: Since our techniques are meant to be used in an interactive setting-for instance, in the context of an IDE-EXPLORER should be sufficiently fast to be used in real time.  ...  This paper describes a general framework-and its implementation in a tool called EXPLORER-for statically answering a class of interprocedural control flow queries about Java programs.  ...  Acknowledgments We thank Saswat Anand for his suggestion regarding our third experiment and Manu Sridharan for helping us add a new interface to his demand-driven pointer analysis in Soot.  ... 
doi:10.1145/2858965.2814284 fatcat:4i4ogzoek5biddn4vxrpjvnoyq

Tai-e: A Static Analysis Framework for Java by Harnessing the Best Designs of Classics [article]

Tian Tan, Yue Li
2022 arXiv   pre-print
Specifically, Tai-e is novel in the designs of several aspects like IR, pointer analysis and development of new analyses, etc., leading to an easy-to-learn, easy-to-use and efficient system.  ...  in a way that analysis developers could benefit more: for example, what a good IR (for analysis) ought to look like?  ...  Data Flow Analysis.  ... 
arXiv:2208.00337v1 fatcat:jur5yojcnrhlnagde33krfzzve
« Previous Showing results 1 — 15 out of 370 results