TU Darmstadt / ULB / TUbiblio

Access-Path Abstraction: Scaling Field-Sensitive Data-Flow Analysis with Unbounded Access Paths

Lerch, Johannes ; Späth, Johannes ; Bodden, Eric ; Mezini, Mira (2015)
Access-Path Abstraction: Scaling Field-Sensitive Data-Flow Analysis with Unbounded Access Paths.
Automated Software Engineering (ASE), 2015 30th IEEE/ACM International Conference on. Lincoln, Nebraska, USA (9.-13. November 2015)
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

Precise data-flow analyses frequently model field accesses through access paths with varying length. While using longer access paths increases precision, their size must be bounded to assure termination, and should anyway be small to enable a scalable analysis. We present Access-Path Abstraction, which for the first time combines efficiency with maximal precision. At control-flow merge points Access-Path Abstraction represents all those access paths that are rooted at the same base variable through this base variable only. The full access paths are reconstructed on demand where required. This makes it unnecessary to bound access paths to a fixed maximal length. Experiments with Stanford SecuriBench and the Java Class Library compare our open-source implementation against a field-based approach and against a field-sensitive approach that uses bounded access paths. The results show that the proposed approach scales as well as a field-based approach, whereas the approach using bounded access paths runs out of memory.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2015
Autor(en): Lerch, Johannes ; Späth, Johannes ; Bodden, Eric ; Mezini, Mira
Art des Eintrags: Bibliographie
Titel: Access-Path Abstraction: Scaling Field-Sensitive Data-Flow Analysis with Unbounded Access Paths
Sprache: Englisch
Publikationsjahr: November 2015
Ort: Washington, DC, USA
Verlag: IEEE Computer Society
Buchtitel: Proceedings of the 2015 30th IEEE/ACM International Conference on Automated Software Engineering (ASE)
Veranstaltungstitel: Automated Software Engineering (ASE), 2015 30th IEEE/ACM International Conference on
Veranstaltungsort: Lincoln, Nebraska, USA
Veranstaltungsdatum: 9.-13. November 2015
URL / URN: https://dl.acm.org/citation.cfm?id=2916135&picked=prox
Kurzbeschreibung (Abstract):

Precise data-flow analyses frequently model field accesses through access paths with varying length. While using longer access paths increases precision, their size must be bounded to assure termination, and should anyway be small to enable a scalable analysis. We present Access-Path Abstraction, which for the first time combines efficiency with maximal precision. At control-flow merge points Access-Path Abstraction represents all those access paths that are rooted at the same base variable through this base variable only. The full access paths are reconstructed on demand where required. This makes it unnecessary to bound access paths to a fixed maximal length. Experiments with Stanford SecuriBench and the Java Class Library compare our open-source implementation against a field-based approach and against a field-sensitive approach that uses bounded access paths. The results show that the proposed approach scales as well as a field-based approach, whereas the approach using bounded access paths runs out of memory.

Freie Schlagworte: Analytical models;Computational modeling;Context;Explosions;Open source software;Scalability;Target tracking;access path;field sensitive;static analysis;Engineering, E1
Fachbereich(e)/-gebiet(e): 20 Fachbereich Informatik
20 Fachbereich Informatik > Softwaretechnik
DFG-Sonderforschungsbereiche (inkl. Transregio)
DFG-Sonderforschungsbereiche (inkl. Transregio) > Sonderforschungsbereiche
Profilbereiche
Profilbereiche > Cybersicherheit (CYSEC)
Zentrale Einrichtungen
20 Fachbereich Informatik > EC SPRIDE
DFG-Sonderforschungsbereiche (inkl. Transregio) > Sonderforschungsbereiche > SFB 1119: CROSSING – Kryptographiebasierte Sicherheitslösungen als Grundlage für Vertrauen in heutigen und zukünftigen IT-Systemen
Hinterlegungsdatum: 29 Jan 2016 13:22
Letzte Änderung: 02 Jan 2019 14:54
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen