Leveraging Test Suites for Better Program Analysis

利用测试套件进行更好的程序分析

• 批准号: RGPIN-2018-03983
• 负责人: Lam, Patrick
• 金额: $ 2.04万
• 依托单位: University of Waterloo
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2019
• 资助国家: 加拿大
• 起止时间: 2019-01-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=682523
• 关键词: Leveraging; Test; Suites; Better; Program

State-of-the-art tools for understanding programs include static and dynamic program analyses, which are powerful tools for predicting and reasoning about program behaviours. Developers use static and dynamic program analysis to improve their software. For example, program analysis can locate undesirable behaviours and help enforce desired properties, including security properties; and it can answer developer questions during program development. Any program analysis, whether static or dynamic, could benefit from additional information about the program.******Modern programming methodologies expect developers to maintain automated test suites along with their software. Test suites encode developer understanding of correct program behaviours.******Consider the following analogy. At its outset, a game of chess allows a vast number of possibilities. Each move restricts the available possibilities for the players---endgames are simple enough for even beginners to analyze. Similarly, each test case focusses attention on specific parts of the program. Restricting the problem scope enables analyses to make strong guarantees about program behaviour within that scope.******The key idea behind the proposed research is to leverage test suites to enable more effective program analyses. The overall long-term objective of the proposed research programme is to develop a theory of combined static and dynamic analysis. This theory will support the design of program analyses that integrate information from source code (as done today) and its test cases (which is novel). Novel hybrid analyses will leverage the strengths of both static and dynamic analyses, using test suites to drive the dynamic analysis and provide information for the static analysis. Dynamic analysis can help refine the approximations inherent to static analysis and reduce the number of reported false positives. Static analysis can broaden the applicability of the results obtained from dynamic analysis.******Specific applications of this theory include, for instance, automatically detecting inconsistencies in test suites. The key insight, that test suites can provide additional information about expected program behaviours, is one that can easily be incorporated into others' research programmes, contributing to the proposed research's academic impact.******There is widespread industry interest in improving test practices. Developers write enormous amounts of test code, and expend substantial effort on software maintenance, which is critically supported by test suites. Results that improve the quality and usability of test suites can be quickly adopted by Canadian industry.**

理解程序的最先进的工具包括静态和动态程序分析，它们是预测和推理程序行为的强大工具。开发人员使用静态和动态程序分析来改进他们的软件。例如，程序分析可以定位不受欢迎的行为，并帮助执行所需的属性，包括安全属性;它可以在程序开发期间回答开发人员的问题。任何程序分析，无论是静态的还是动态的，都可以从有关程序的附加信息中受益。现代编程方法期望开发人员在维护软件的同时沿着自动化测试套件。测试套件编码开发人员对正确程序行为的理解。考虑下面的类比。一开始，国际象棋游戏允许大量的可能性。每一步棋都限制了玩家的可能性-残局很简单，即使是初学者也可以分析。同样，每个测试用例都将注意力集中在程序的特定部分。限制问题范围使分析能够对该范围内的程序行为做出强有力的保证。建议的研究背后的关键思想是利用测试套件，使更有效的程序分析。拟议研究方案的总体长期目标是发展一种静态和动态分析相结合的理论。这一理论将支持程序分析的设计，它将源代码（如今天所做的）及其测试用例（这是新颖的）中的信息整合在一起。新的混合分析将利用静态和动态分析的优势，使用测试套件来驱动动态分析并为静态分析提供信息。动态分析可以帮助改进静态分析固有的近似值，并减少报告的误报数量。静态分析可以拓宽动态分析结果的适用范围。**这个理论的具体应用包括，例如，自动检测测试套件中的不一致性。测试套件可以提供有关预期程序行为的额外信息，这是一个可以很容易地被纳入其他研究计划的关键见解，有助于拟议研究的学术影响。业界对改进测试实践存在广泛的兴趣。开发人员编写了大量的测试代码，并在软件维护上花费了大量的精力，这是由测试套件提供关键支持的。提高测试套件质量和可用性的结果可以迅速被加拿大工业采用。**