SHF: Small: Pa3S: Towards Pointer Analysis as a Service

指针分析是软件构造、维护和性能优化的基础技术，在编译器优化、缺陷检测、安全分析、测试、调试、验证、程序理解等方面有着广泛的应用，但经过几十年的研究，指针分析的原理与其在真实的世界中的实际应用之间仍存在着巨大的差距。由于指针分析固有的计算复杂性，当今大多数生产编译器仅使用不精确的过程内指针分析，并且整个程序的过程间指针分析很少成功地应用于大型现实世界应用程序，例如Linux内核或Google Chrome浏览器。该项目将创建用于指针分析的软件即服务（SaaS）平台，它提供了一组标准API，用于计算指针分析并回答来自互联网上的用户的指针分析查询，而不管他们的应用程序、执行环境或物理位置如何。SaaS提供了一个很有前途的解决方案，以解决性能和可用性的挑战，指针分析使用一个集中的服务器来计算和存储的指针分析结果，并有效地共享用户之间的计算和结果。为了实现这样一个平台，该项目将开发新的分布式增量指针分析算法，新的指针分析查询API，以及对大规模应用程序进行编译器优化和错误检测的评估。如果成功的话，这些技术将使指针分析更具可扩展性，并更广泛地适用于大型复杂代码库，最终导致更快，更安全的最终用户软件产品。这个奖项反映了NSF的法定使命，并已被认为是值得通过使用基金会的智力价值和更广泛的影响审查标准进行评估的支持。

Pointer analysis is a fundamental technique that underpins a wide range of applications in software construction, maintenance and performance optimization, such as compiler optimization, bug detection, security analysis, testing, debugging, verification, program comprehension, and so on. However, despite decades of research there still exists a huge gap between the principled promise of pointer analysis and its practical usage in the real world. Due to the inherent computational complexity of pointer analysis, most production compilers today use only imprecise intra-procedural pointer analyses, and a whole-program interprocedural pointer analysis has rarely been successfully applied to large real-world applications such as the Linux kernel or the Google Chrome browser.This project will create a software as a service (SaaS) platform for pointer analysis, which provides a set of standard APIs for computing pointer analysis and answering pointer analysis queries from users over the Internet, regardless of their applications, execution environments, or physical locations. SaaS provides a promising solution to address the performance and usability challenges of pointer analysis by using a centralized server to compute and memorize the pointer analysis results, and sharing the computation and results effectively among users. To realize such a platform, this project will develop new distributed incremental pointer-analysis algorithms, new APIs for pointer-analysis queries, and evaluations on large-scale applications with compiler optimizations and bug detection. If successful, these techniques will make pointer analysis more scalable and more widely applicable to large complex code bases, eventually leading to faster and more secure end-user software products.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.