paperbot · PL 论文追踪

全部论文 待读 收藏

Conflict Extraction in Probabilistic Datalog Analyses

概率 Datalog 分析中的冲突提取
ASE Proceedings of the 41st IEEE/ACM International Conference on Automated Software Engineering2026引用 0 inbox
Siyu Chen, Chungha Sung, Xuyang Li, Jingbo Wang
crossref: 2026-10-09

AI 速览

一句话:提出 PPProbe,从概率 Datalog 分析结果中高效抽取最小不可满足子集冲突,过滤互斥告警。

概率 Datalog 扩展使指针分析、数据竞争检测和侧信道分析等静态分析能按可能性排序告警,但边际概率不保证联合可满足:输出可能包含各自合理却互斥的告警。作者将这类不一致形式化为最小不可满足子集(MUS),并面向概率 Datalog 分析提出冲突抽取器 PPProbe。它不改进通用 MUS 枚举,而是利用 Datalog 推导图结构引导搜索更可能的冲突,并用自底向上 UNSAT 推断剪枝。在功率侧信道分析、数据竞争检测、语义差分和贝叶斯网络推断的 70 个基准上,PPProbe 吞吐量比当前最优 MUS 枚举器高 2.5–24 倍;其冲突平均过滤 47.7% 的互斥告警,给出假阳性减少的保守估计。

问题
概率 Datalog 静态分析按边际概率输出告警,但无法保证告警联合可满足,导致开发者可能调查不可能共存的告警组合。
方法
将不一致形式化为 MUS,提出专用冲突抽取器 PPProbe,利用 Datalog 推导图引导搜索并通过自底向上 UNSAT 推断剪枝。
评估
在 70 个来自功率侧信道分析、数据竞争检测、语义差分和贝叶斯网络推断的基准上评估,吞吐量比 SOTA MUS 枚举器高 2.5–24 倍,平均过滤 47.7% 互斥告警。
原文摘要(Abstract)

Probabilistic extensions of Datalog enable static analyses such as pointer analysis, data race detection, and side-channel analysis to rank alarms by likelihood, but this added expressiveness also introduces a new challenge absent from deterministic analyses: the final output may contain alarms that are individually plausible yet mutually inconsistent, because marginal probabilities do not guarantee joint satisfiability. As a result, developers may spend effort investigating combinations of alarms that can never co-occur in any possible world. We address this problem by formalizing such inconsistencies as minimal unsatisfiable subsets (MUSes) and introducing PPProbe, a conflict extractor specialized for probabilistic Datalog analyses. Rather than improving MUS enumeration in general, PPProbe exploits the structure of Datalog derivation graphs to guide the search toward likely conflicts and prune the search space through bottom-up UNSAT inference. We evaluate PPProbe on 70 benchmarks from power side-channel analysis, data race detection, semantic diffing, and Bayesian-network inference. The results show that PPProbe achieves 2.5–24× higher throughput than state-of-the-art MUS enumerators, and that the conflicts it identifies yield a conservative estimate of false-positive reduction, filtering out an average of 47.7% of mutually inconsistent alarms.

链接与引用

DOI 原文 · arXiv ·

BibTeX
@inproceedings{paperbot12605,
  title = {Conflict Extraction in Probabilistic Datalog Analyses},
  author = {Siyu Chen and Chungha Sung and Xuyang Li and Jingbo Wang},
  booktitle = {ASE},
  year = {2026},
  doi = {10.1145/3832783.3834404}
}