一句话:提出 PPProbe,从概率 Datalog 分析结果中高效抽取最小不可满足子集冲突,过滤互斥告警。
概率 Datalog 扩展使指针分析、数据竞争检测和侧信道分析等静态分析能按可能性排序告警,但边际概率不保证联合可满足:输出可能包含各自合理却互斥的告警。作者将这类不一致形式化为最小不可满足子集(MUS),并面向概率 Datalog 分析提出冲突抽取器 PPProbe。它不改进通用 MUS 枚举,而是利用 Datalog 推导图结构引导搜索更可能的冲突,并用自底向上 UNSAT 推断剪枝。在功率侧信道分析、数据竞争检测、语义差分和贝叶斯网络推断的 70 个基准上,PPProbe 吞吐量比当前最优 MUS 枚举器高 2.5–24 倍;其冲突平均过滤 47.7% 的互斥告警,给出假阳性减少的保守估计。
Probabilistic extensions of Datalog enable static analyses such as pointer analysis, data race detection, and side-channel analysis to rank alarms by likelihood, but this added expressiveness also introduces a new challenge absent from deterministic analyses: the final output may contain alarms that are individually plausible yet mutually inconsistent, because marginal probabilities do not guarantee joint satisfiability. As a result, developers may spend effort investigating combinations of alarms that can never co-occur in any possible world. We address this problem by formalizing such inconsistencies as minimal unsatisfiable subsets (MUSes) and introducing PPProbe, a conflict extractor specialized for probabilistic Datalog analyses. Rather than improving MUS enumeration in general, PPProbe exploits the structure of Datalog derivation graphs to guide the search toward likely conflicts and prune the search space through bottom-up UNSAT inference. We evaluate PPProbe on 70 benchmarks from power side-channel analysis, data race detection, semantic diffing, and Bayesian-network inference. The results show that PPProbe achieves 2.5–24× higher throughput than state-of-the-art MUS enumerators, and that the conflicts it identifies yield a conservative estimate of false-positive reduction, filtering out an average of 47.7% of mutually inconsistent alarms.