SHF: Small: User-Centered Software Analysis Tools

建议的工作探索使静态分析工具在用户手中更有效的技术。这将导致新的静态分析算法、技术和接口的发展，为用户提供查找、验证和修复缺陷所需的信息。提议工作的核心将是一个静态分析、可视化和交互的框架，包含几个组件。首先，框架将包括检查表来帮助用户分类缺陷报告，例如：，判断它们是真阳性还是假阳性。目的是开发静态分析仪器的方法，以根据分析过程中引入的不精确性自动生成检查表。其次，该框架将包括轻量级查询和搜索工具，以帮助用户处理静态分析工具的结果。当用户试图理解错误报告时，需要有效的方法来查询工具生成的知识库；当前的静态错误报告往往提供太少或太多的信息。第三，该框架将包括程序路径的通用可视化，这是许多静态分析工具缺陷报告的核心部分。虽然有些工具包括简单的路径可视化，但我们的框架将通过应用信息可视化原则来实现更有效的接口。

The proposed work explores techniques for making static analysis toolsmore effective in the hands of users. This will lead to thedevelopment of new static analysis algorithms, techniques, andinterfaces that provide the information users need to find, verify,and fix defects.The core of the proposed work will be a framework for static analysisvisualization and interaction, with several components. First, theframework will include checklists to help users triage defect reports,i.e., decide whether they are true or false positives. The aim is todevelop ways to instrument static analyses to automatically generatechecklists based on imprecision introduced during the analysis.Second, the framework will include lightweight query and searchfacilities to help users work with static analysis tool results. Usersneed effective ways to query the knowledge-base generated by a toolwhen trying to understand an error report; current static errorreports tend to provide too little or too much information. Third, theframework will include a generic visualization for program paths, acore part of many static analysis tools' defect reports. While sometools include simple path visualization, our framework will aim forfar more effective interfaces by applying information visualizationprinciples.