CPA-SEL: Blended Static/Dynamic Analyses for Performance Understanding and Improved Security of Framework-intensive Applications

CPA-SEL：混合静态/动态分析，用于了解性能并提高框架密集型应用程序的安全性

• 批准号: 0964870
• 负责人: Barbara Ryder
• 金额: $ 18.47万
• 依托单位: Virginia Polytechnic Institute and State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2009
• 资助国家: 美国
• 起止时间: 2009-06-10 至 2014-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0964870&HistoricalAwards=false
• 关键词: CPA; SEL; Blended; Static; Dynamic

CCF-0811518Blended Static/Dynamic Analysis for Performance Understanding and Improved Security of Framework-intensive ApplicationsBarbara G. RyderWeb applications built on numerous layers of frameworks are in wide usage by the commercial and research communities, and present a challenge to existing analysis techniques. Purely static analyses suffer problems of insufficient scalability and/or insufficient precision for answering behavioral questions. Purely dynamic analyses introduce too much overhead in production systems, or are too limited in the information gathered. Further, while existing dynamic performance analyses focus on control flow, the main purpose of these web applications is to manipulate data. This proposal addresses these weaknesses by blending static and dynamic analyses in new ways that avoid these problems and support tools for framework-intensive applications. The intellectual challenge is to advance the state-of-the-art in program analysis by developing analyses of practical cost and of sufficient precision to scale up to industrial-strength framework-intensive software.The research will address two specific sub goals: (i) the design of and experimentation with blended analyses that identify performance problems in framework-based applications, (e.g., excessive use of temporary data structures), and (ii) the development of a blended analysis to refine current access control analyses for framework-intensive software.

CCF-0811518混合静态/动态分析用于了解性能和提高框架密集型应用程序的安全性Barbara G.RyderWeb应用程序构建在多个框架层上，被商业和研究团体广泛使用，并对现有的分析技术提出了挑战。纯静态分析存在可伸缩性不足和/或回答行为问题的精确度不足的问题。纯粹的动态分析在生产系统中引入了太多的开销，或者收集的信息太有限。此外，虽然现有的动态性能分析侧重于控制流，但这些Web应用程序的主要目的是操作数据。该提案通过以新的方式混合静态和动态分析来解决这些弱点，避免了这些问题，并支持框架密集型应用程序的工具。智力上的挑战是通过开发实际成本和足够精度的分析来推进程序分析的最新水平，以扩展到工业强度的框架密集型软件。研究将解决两个特定的子目标：(I)设计和实验混合分析，以识别基于框架的应用程序中的性能问题(例如，过度使用临时数据结构)；以及(Ii)开发混合分析来完善框架密集型软件的当前访问控制分析。