Filters








1,584 Hits in 3.8 sec

Learning a Static Analyzer from Data [chapter]

Pavol Bielik, Veselin Raychev, Martin Vechev
2017 Lecture Notes in Computer Science  
We implemented and instantiated our approach to the task of learning JavaScript static analysis rules for a subset of points-to analysis and for allocation sites analysis.  ...  Our method consists of two ingredients: (i) a synthesis algorithm capable of learning a candidate analyzer from a given dataset, and (ii) a counter-example guided learning procedure which generates new  ...  Counter-example guided learning To learn a static analyzer pa, the synthesizer and the oracle are linked together in a counter-example guided loop.  ... 
doi:10.1007/978-3-319-63387-9_12 fatcat:d4y3ufqihrgqvpeqjztmhgssei

Learning a Static Analyzer from Data [article]

Pavol Bielik, Veselin Raychev, Martin Vechev
2017 arXiv   pre-print
We implemented and instantiated our approach to the task of learning JavaScript static analysis rules for a subset of points-to analysis and for allocation sites analysis.  ...  Our method consists of two ingredients: (i) a synthesis algorithm capable of learning a candidate analyzer from a given dataset, and (ii) a counter-example guided learning procedure which generates new  ...  Counter-example guided learning To learn a static analyzer pa, the synthesizer and the oracle are linked together in a counter-example guided loop.  ... 
arXiv:1611.01752v2 fatcat:lra5izmzv5bd5b3o2pmhiowsjq

Android taint flow analysis for app sets

William Klieber, Lori Flynn, Amar Bhosale, Limin Jia, Lujo Bauer
2014 Proceedings of the 3rd ACM SIGPLAN International Workshop on the State of the Art in Java Program Analysis - SOAP '14  
This paper describes a new static taint analysis for Android that combines and augments the FlowDroid and Epicc analyses to precisely track both inter-component and intra-component data flow in a set of  ...  This paper describes our analysis method, implementation, and experimental results.  ...  Bodden for encouraging us to work on this analysis that incorporates Epicc and FlowDroid analyses. We thank Robert Seacord for useful discussions and the anonymous reviewers for their comments.  ... 
doi:10.1145/2614628.2614633 dblp:conf/pldi/KlieberFBJB14 fatcat:kx2fp6eoyjbv7kpjsuenrgg7im

Automatic generation of program specifications

Jeremy W. Nimmer, Michael D. Ernst
2002 Software engineering notes  
the annotation burden for users of the static analysis.  ...  Producing specifications by dynamic (runtime) analysis of program executions is potentially unsound, because the analyzed executions may not fully characterize all possible executions of the program.  ...  Selecting a goal and annotating programs for input to a static checker can be difficult and tedious.  ... 
doi:10.1145/566172.566213 dblp:conf/issta/NimmerE02 fatcat:tatd6ue77vdqtjrhpkhinhjwma

Automatic generation of program specifications

Jeremy W. Nimmer, Michael D. Ernst
2002 Software engineering notes  
the annotation burden for users of the static analysis.  ...  Producing specifications by dynamic (runtime) analysis of program executions is potentially unsound, because the analyzed executions may not fully characterize all possible executions of the program.  ...  Selecting a goal and annotating programs for input to a static checker can be difficult and tedious.  ... 
doi:10.1145/566171.566213 fatcat:wscmdr2j2varbagk3gagldp42q

Automatic generation of program specifications

Jeremy W. Nimmer, Michael D. Ernst
2002 Software engineering notes  
the annotation burden for users of the static analysis.  ...  Producing specifications by dynamic (runtime) analysis of program executions is potentially unsound, because the analyzed executions may not fully characterize all possible executions of the program.  ...  Selecting a goal and annotating programs for input to a static checker can be difficult and tedious.  ... 
doi:10.1145/566210.566213 fatcat:2ohlclualffefa7podd4flld6a

An overview of Prolog debugging tools

Paul Brna, Mike Brayshaw, Alan Bundy, Mark Elsom-Cook, Pat Fung, Tony Dodd
1991 Instructional Science  
The analysis offered is in terms of a classification of tools that provide different degrees of activity in the debugging process. Other possible dimensions of analysis are also outlined.  ...  Two approaches being pursued include one which makes use of several sources of information -static analysis, dataflow and Shapiro's guided debugging system-and another which seeks to identify novice's  ...  The debugger performs an initial static analysis of the programchecking for things like looping and wrong argument types (Mycroft & O'Keefe, 1984) .  ... 
doi:10.1007/bf00120882 fatcat:7yen3seovbdidklzd777zenye4

Understanding and Analyzing Java Reflection

Yue Li, Tian Tan, Jingling Xue
2019 ACM Transactions on Software Engineering and Methodology  
As a result, in almost all the static analysis tools, reflection is either ignored or handled partially, resulting in missed, important behaviors, i.e., unsound results.  ...  Based on this study, this thesis then presents two new techniques for handling reflection statically: a self-inferencing analysis called ELF, and a soundness-guided analysis called SOLAR.  ...  Effective Soundness-Guided Reflection Analysis. 22nd International Static Analysis Symposium (SAS'15). • Yue Li, Tian Tan, Yulei Sui and Jingling Xue.  ... 
doi:10.1145/3295739 fatcat:wdiw5irjmzf65cqgqso3rn2vbe

Establishing flight software reliability: testing, model checking, constraint-solving, monitoring and learning

Alex Groce, Klaus Havelund, Gerard Holzmann, Rajeev Joshi, Ru-Gang Xu
2014 Annals of Mathematics and Artificial Intelligence  
The approaches we describe here are based on testing, model checking, constraint-solving, monitoring, and finite-state machine learning, in addition to static code analysis.  ...  engineers and software developers, even as the key problem shifts from test generation and selection to test evaluation.  ...  Acknowledgments: We are indebted to the members of the Mars Science Laboratory Flight Software Internal Test (FIT) team for contributions to the pattern language design and the early efforts at learning  ... 
doi:10.1007/s10472-014-9408-8 fatcat:2s5dwnoavzhibosf2if2ycsbhe

Speedup Learning [chapter]

Alan Fern
2017 Encyclopedia of Machine Learning and Data Mining  
Definition Speedup learning is a branch of machine learning that studies learning mechanisms for speeding up problem solvers based on problem solving experience.  ...  The most distinctive feature of speedup learning, compared to most branches of machine learning, is that the learned knowledge does not provide the problem solver with the ability to solve new problem  ...  The learned rules were then added as constraints to the constraint satisfaction engine, which served to guide the solver to solution plans more quickly.  ... 
doi:10.1007/978-1-4899-7687-1_778 fatcat:6gcjcekzhvag7pgxrcpenbaklu

White-Box Analysis over Machine Learning: Modeling Performance of Configurable Systems [article]

Miguel Velez, Pooyan Jamshidi, Norbert Siegmund, Sven Apel, Christian Kästner
2021 arXiv   pre-print
, compositionality, and compression of the configuration space, without relying on machine learning to extrapolate incomplete samples.  ...  We present Comprex, a white-box approach to build performance-influence models for configurable systems, combining insights of local measurements, dynamic taint analysis to track options in the implementation  ...  We thank Chu-Pan Wong, Jens Meinicke, and Florian Sattler for their comments during the development of this work, the FOSD 2019 meeting participants for their feedback on the iterative dynamic taint analysis  ... 
arXiv:2101.05362v1 fatcat:dcya4usgsze7boggmrrwb7tveq

Symbolic Methods in Testing (Dagstuhl Seminar 13021)

Thierry Jéron, Margus Veanes, Burkhart Wolff, Marc Herbstritt
2013 Dagstuhl Reports  
Symbolic Test Selection based on Approximate Analysis. In 11th Int.  ...  The relation between the three fields of research: testing, symbolic methods, and machine learning is quite interesting and is illustrated in the following figure: Abtractly, a machine learning algorithm  ...  conditions can aid in identifying equivalent mutants, thus guiding efforts to improve test suites. References  ... 
doi:10.4230/dagrep.3.1.1 dblp:journals/dagstuhl-reports/JeronVW13 fatcat:qg6wp73g6jejbg6xsmysn574dy

Understanding and Analyzing Java Reflection [article]

Yue Li, Tian Tan, Jingling Xue
2017 arXiv   pre-print
As a result, existing static analysis tools either ignore reflection or handle it partially, resulting in missed, important behaviours, i.e., unsound results.  ...  Therefore, improving or even achieving soundness in (static) reflection analysis -- an analysis that infers statically the behaviour of reflective code -- will provide significant benefits to many analysis  ...  -We introduce a new static analysis approach, called SOLAR (soundness-guided reflection analysis), to resolve Java reflection effectively in practice.  ... 
arXiv:1706.04567v1 fatcat:u3tra2sqqndjbfvgyu76aznyru

A Taxonomy and Qualitative Comparison of Program Analysis Techniques for Security Assessment of Android Software

Alireza Sadeghi, Hamid Bagheri, Joshua Garcia, Sam Malek
2017 IEEE Transactions on Software Engineering  
The systematic analysis of the research literature has revealed patterns, trends, and gaps in the existing literature, and underlined key challenges and opportunities that will shape the focus of future  ...  [28] , static analysis [29] , or machine learning [30] as well as mechanisms targeting the enhancement of the Android security platform [31] , [32] ).  ...  Among the surveyed research, Machine Learning and Formal Analysis are the most widely used techniques.  ... 
doi:10.1109/tse.2016.2615307 fatcat:lf4auma3fbe6thk4bxxsvasg4u

A Survey on Machine Learning Techniques for Source Code Analysis [article]

Tushar Sharma, Maria Kechagia, Stefanos Georgiou, Rohit Tiwari, Federica Sarro
2021 arXiv   pre-print
Objective: We aim to summarize the current knowledge in the area of applied machine learning for source code analysis.  ...  Results: Our findings suggest that the usage of machine learning techniques for source code analysis tasks is consistently increasing.  ...  [134] generated data to train an ml model in pursuit to balance soundness and relevance in static analysis by selectively allowing unsoundness only when it is likely to reduce false alarms.  ... 
arXiv:2110.09610v1 fatcat:jc6c3jnxcbekfbssyy7hn3zwxa
« Previous Showing results 1 — 15 out of 1,584 results