Sparse Demand-Driven Analysis to Improve Software Reliability and Security

当前的静态分析工具可以消除传统测试错过的许多错误，但它们仍然不精确或效率低下。该项目旨在开发精确的指针分析，使查找客户端能够有效地检测C/ c++和Java大规模程序中的错误，在这些程序中，指针被广泛使用。新颖之处在于基于上下文无关的语言可达性（允许按需回答客户端查询）稀疏地执行这些分析（允许数据流信息直接从变量定义移动到它们的潜在用途）。研究结果旨在显著提高工业规模软件的可靠性和安全性。

Current static analysis tools can eliminate many bugs missed by traditional testing but they are still imprecise or inefficient. This project aims to develop precise pointer analyses that enable -finding clients to detect bugs efficiently in large-scale programs in C/C++ and Java, where pointers are used pervasively. The novelty lies in performing these analyses sparsely (allowing data-flow information to move directly from variable definitions to their potential uses) based on Context-Free-Language-reachability (enabling client queries to be answered on-demand). The outcomes aim to significantly improve the reliability and security of industrial-sized software.