paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Automatic Testing and Benchmarking for Configurable Static Analysis Tools

面向可配置静态分析工具的自动测试与基准测试
ISSTA Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis2023匹配度 3/10 · 该论文关注可配置静态分析工具的自动测试、调试与基准构建,属于传统程序分析/PL领域,但与用户核心方向(PL与LLM/Agent交叉、浮点程序分析、贝叶斯程序分析)没有直接关联;仅在静态分析工具可靠性与基准构建层面有边缘相关性。引用 5 inbox
Austin Mordahl
crossref: 2026-09-12dblp: 2026-09-12

AI 速览

一句话:面向可配置静态分析工具,提出自动测试与调试框架,并开展实证研究与基准构建。

静态分析是检测真实软件缺陷的重要手段,但可配置静态分析工具的配置空间复杂且测试不足,阻碍其广泛采用。本文(博士研究)聚焦自动测试与调试此类工具:首先对 Android 可配置污点分析工具进行实证研究,理解其性能与行为;这些发现推动 ECSTATIC 框架的设计,该框架超越污点分析,可测试和调试任意可配置静态分析工具。下一步将自动创建带 ground truth 和分析特征的真实世界静态分析基准,以提升工具的可靠性。

问题
可配置静态分析工具拥有复杂且缺乏测试的配置空间,导致其可靠性不足并阻碍广泛采用;需要理解其行为并实现自动测试、调试与基准评估。
方法
通过 Android 污点分析工具的实证研究提炼问题,并开发 ECSTATIC——面向任意可配置静态分析工具的自动测试与调试框架;后续规划自动生成带 ground truth 与分析特征的真实基准。
评估
以 Android 可配置污点分析工具的实证研究评估其性能与行为,并据此驱动 ECSTATIC 的测试与调试能力;真实基准构建是下一步评估方向。
原文摘要(Abstract)

Static analysis is an important tool for detecting bugs in real-world software. The advent of numerous analysis algorithms with their own tradeoffs has led to the proliferation of configurable static analysis tools, but their complex, undertested configuration spaces are obstacles to their widespread adoption. To improve the reliability of these tools, my research focuses on developing new approaches to automatically test and debug them. First, I describe an empirical study that helps to understand the performance and behavior of configurable taint analysis tools for Android. The findings of this study motivate the development of ECSTATIC, a framework for testing and debugging that goes beyond taint analysis to test any configurable static analysis tool. The next steps for this research involve the automatic creation of real-world benchmarks for static analysis with associated ground truths and analysis features.

链接与引用

DOI 原文 · PDF(开放获取) · DBLP

BibTeX
@inproceedings{Mordahl23,
  title = {Automatic Testing and Benchmarking for Configurable Static Analysis Tools},
  author = {Austin Mordahl},
  booktitle = {ISSTA},
  year = {2023},
  doi = {10.1145/3597926.3605232}
}