一句话：提出 SWAN，一个面向 Swift 的静态分析框架，支持污点追踪等深层分析。
论文指出现有静态分析生态对 Swift 支持不足：LLVM 与 Clang 虽提供部分分析，但主要面向动态分析或难以支持污点追踪等更深层的 Swift 程序分析；其他 Swift 工具多用于代码风格和最佳实践检查。为此，作者提出 SWAN，一个面向 Swift 的静态分析框架，旨在填补缺少可比静态分析工具这一空白。摘要主要阐述工具定位与动机，未说明具体分析算法、实现架构和实验评估结果；其强调的能力是支持对 Swift 程序进行更深入的静态分析，例如污点追踪。
Swift is an open-source programming language and Apple's recommended choice for app development. Given the global widespread use of Apple devices, the ability to analyze Swift programs has significant impact on millions of users. Although static analysis frameworks exist for various computing platforms, there is a lack of comparable tools for Swift. While LLVM and Clang support some analyses for Swift, they are either primarily dynamic analyses or not suitable for deeper analyses of Swift programs such as taint tracking. Moreover, other existing tools for Swift only help enforce code styles and best practices.
DOI 原文 ·
@inproceedings{paperbot5700,
title = {SWAN: a static analysis framework for swift},
author = {Daniil Tiganov and Jeff Cho and Karim Ali and Julian Dolby},
booktitle = {FSE},
year = {2020},
doi = {10.1145/3368089.3417924}
}