Collaborative Research: FMitF: Track II: Cross-Language Support for Runtime Verification

合作研究：FMitF：轨道 II：运行时验证的跨语言支持

• 批准号: 2319472
• 负责人: Marcelo d'Amorim
• 金额: $ 5万
• 依托单位: North Carolina State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-09-01 至 2026-02-28
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2319472&HistoricalAwards=false
• 关键词: Collaborative; Research; FMitF; Track; II

Runtime verification (RV) can help find bugs early, before the software is deployed. RV monitors program executions against formal behavioral specifications and generates violations if those executions do not satisfy the specifications. Prior RV research found hundreds of bugs in scores of open-source projects. But that prior research used tooling that only targets the Java programming language and checks specifications written in a domain-specific language that is hard for new RV users to learn. This project’s impact is to make RV more widely used for bug finding among developers by creating RV tool support for other programming languages and simpler specification formats. The project’s novelty is that it targets commonly-used languages and formats to lower the language barriers to entry for developers who are new to RV, and makes it easier for them to write specifications. The investigators will train undergraduate students to participate in developing OpenMOP, create modules on OpenMOP in their software engineering classes, and evaluate OpenMOP usage when deploying it to find bugs during software development.This project proposes OpenMOP to address infrastructure gaps that today make it hard to use RV to find bugs. OpenMOP is an RV infrastructure that builds on and reuses parts of JavaMOP -- an RV tool for Java that has been in development since 2002. OpenMOP provides two new features. First, it enables developers to describe program events and properties in formats that they are already familiar with. For example, in one proposed format, developers can define the program events needed to specify program behavior at a small set of program locations, similar to adding breakpoints for debugging. Second, OpenMOP adopts a language-agnostic client-server architecture to enable the rapid creation of efficient RV tools for different programming languages.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

软件验证（RV）可以帮助在部署软件之前及早发现bug。RV根据正式的行为规范监视程序执行，如果这些执行不满足规范，则生成违规。RV之前的研究发现，在许多开源项目中存在数百个bug。但是之前的研究使用的工具只针对Java编程语言，并检查用特定于域的语言编写的规范，这对RV新用户来说很难学习。该项目的影响是通过创建RV工具支持其他编程语言和更简单的规范格式，使RV更广泛地用于开发人员中的bug查找。该项目的新奇在于，它针对常用的语言和格式，以降低RV新手开发人员的语言门槛，并使他们更容易编写规范。研究人员将培训本科生参与开发OpenMOP，在软件工程课程中创建OpenMOP模块，并在部署OpenMOP时评估OpenMOP的使用情况，以在软件开发过程中发现错误。该项目提出OpenMOP来解决基础设施的差距，这些差距使得今天很难使用RV来发现错误。OpenMOP是一个RV基础设施，它构建在JavaMOP的基础上并重用了JavaMOP的一部分，JavaMOP是一个自2002年以来一直在开发的Java RV工具。OpenMOP提供了两个新功能。首先，它使开发人员能够以他们已经熟悉的格式描述程序事件和属性。例如，在一种提议的格式中，开发人员可以定义在一小组程序位置处指定程序行为所需的程序事件，类似于添加断点以进行调试。其次，OpenMOP采用了与语言无关的客户端-服务器架构，能够快速创建适用于不同编程语言的高效RV工具。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。