Adaptive value-flow analysis to improve code reliability and security

本项目旨在开发客户驱动的适应性价值流分析，以检测以C/C++编程语言编写的系统软件中的软件错误。用于自动化代码检查的静态分析工具可以使软件开发人员受益，但对于分析真实世界的工业规模的软件来说，这些工具不精确，效率低下，用户界面不友好。该项目将研究静态、动态和用户指导的价值流分析，以便根据客户的需要有效和精确地分析大型程序，从而使编译器能够生成安全、可靠和可靠的代码。预计该项目将推进工业规模软件的价值流分析，提高软件的可靠性和安全性，并使澳大利亚的软件系统和行业受益。

This project aims to develop client-driven adaptive value-flow analysis to detect software bugs in system software written in the C/C++ programme language. Static analysis tools for automated code inspections can benefit software developers, but are imprecise, inefficient and not user-friendly for analysing real-world industrial-sized software. The project will investigate static, dynamic and user-guided value-flow analysis to efficiently and precisely analyse large-scale programs according to clients’ needs, thereby allowing compilers to generate safe, reliable and secure code. This project is expected to advance value-flow analysis for industrial-sized software, improve software reliability and security, and benefit Australian software systems and industries.