SHF: EAGER: Collaborative Research: Demonstrating the Feasibility of Automatic Program Repair Guided by Semantic Code Search

SHF：EAGER：协作研究：展示语义代码搜索引导的自动程序修复的可行性

• 批准号: 1646813
• 负责人: Kathryn Stolee
• 金额: $ 1.68万
• 依托单位: North Carolina State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-01-01 至 2016-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1646813&HistoricalAwards=false
• 关键词: SHF; EAGER; Collaborative; Research; Demonstrating

Software is an integral part of our everyday lives, and our economy relies heavily on software working correctly. However, bugs in software cause security breaches, and cost our economy billions of dollars annually. While these high costs of bugs are well known, the software industry struggles to remedy the situation because the inherent complexity of the software makes bugs so common that new bugs are typically reported faster than developers can fix them. The goal of this project is to develop a technique that fixes bugsautomatically, greatly reducing the cost of fixing the bugs, improving quality of software, and reducing the negative effects on the economy and society.Because so much software has already been written, many subroutines, data structures, and algorithm implementations already exist as part of open-source software. Therefore, for many software bugs, there already exist subroutines, data structures, and algorithm implementations in other open-source software that implement the correct behavior and can be substituted into buggy systems to fix the bugs. This project verifies two key properties necessary to build such a bug fixing technique. First, the project attempts to validate the assumption that correct code candidates actually exist in open-source software code bases. Second, the project aims to demonstrate that semantic code search techniques can effectively find these code candidates, and that the gaps between the correct and incorrect versions can be bridged using automatic techniques. Altogether, this exploratory project is intended to establish the feasibility of automated bug fixing through semantic search of open-source software. The broader impact of this work is the advancement of techniques that improve software quality, which, in turn, reduces the negative economic and societal effects of software bugs. This grant is exploratory work on an untested, but potentially transformative, research idea.

软件是我们日常生活中不可或缺的一部分，我们的经济在很大程度上依赖于软件的正常运行。然而，软件中的漏洞会导致安全漏洞，每年给我们的经济造成数十亿美元的损失。虽然这些错误的高成本是众所周知的，但软件行业正在努力纠正这种情况，因为软件固有的复杂性使得错误如此普遍，以至于新错误的报告速度通常比开发人员修复它们的速度要快。该项目的目标是开发一种自动修复bug的技术，大大降低修复bug的成本，提高软件质量，减少对经济和社会的负面影响。由于已经编写了如此多的软件，许多子程序、数据结构和算法实现已经作为开源软件的一部分存在。因此，对于许多软件bug，在其他开源软件中已经存在子例程、数据结构和算法实现，它们实现了正确的行为，可以替换到有bug的系统中来修复bug。这个项目验证了构建这种bug修复技术所必需的两个关键属性。首先，该项目试图验证开源软件代码库中确实存在正确的候选代码的假设。其次，该项目旨在证明语义代码搜索技术可以有效地找到这些候选代码，并且可以使用自动技术弥合正确和不正确版本之间的差距。总之，这个探索性项目旨在通过开源软件的语义搜索建立自动修复错误的可行性。这项工作的更广泛的影响是提高软件质量的技术的进步，这反过来又减少了软件错误的负面经济和社会影响。这笔拨款是对一个未经测试但可能具有变革性的研究理念的探索性工作。