Eventually Sound Points-To Analysis with Specifications
Eventually Sound Points-To Analysis with Specifications
复制标题
最终合理的要点分析与规范
DOI:
10.4230/lipics.ecoop.2019.11
复制
发表时间:
2019
期刊:
影响因子:
--
通讯作者:
A. Aiken
中科院分区:
文献类型:
--
作者:
O. Bastani;Rahul Sharma;Lazaro Clapp;Saswat Anand;A. Aiken
Static analyses make the increasingly tenuous assumption that all source code is available for analysis; for example, large libraries often call into native code that cannot be analyzed. We propose a points-to analysis that initially makes optimistic assumptions about missing code, and then inserts runtime checks that report counterexamples to these assumptions that occur during execution. Our approach guarantees eventual soundness, which combines two guarantees: (i) the runtime checks are guaranteed to catch the first counterexample that occurs during any execution, in which case execution can be terminated to prevent harm, and (ii) only finitely many counterexamples ever occur, implying that the static analysis eventually becomes statically sound with respect to all remaining executions. We implement Optix, an eventually sound points-to analysis for Android apps, where the Android framework is missing. We show that the runtime checks added by Optix incur low overhead on real programs, and demonstrate how Optix improves a client information flow analysis for detecting Android malware. 2012 ACM Subject Classification Theory of computation æ Program analysis
DOI:
10.1145/3173162.3177153
发表时间:
2018
期刊:
Architectural Support for Programming Languages and Operating Systems
影响因子:
--
作者:
Devecsery, David;Chen, Peter M.;Flinn, Jason;Narayanasamy, Satish
通讯作者:
Narayanasamy, Satish