TU Darmstadt / ULB / TUbiblio

Tracking Load-time Configuration Option

Lillack, Max ; Kästner, Christian ; Bodden, Eric (2014)
Tracking Load-time Configuration Option.
Vasteras, Sweden
doi: 10.1145/2642937.2643001
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

Highly-configurable software systems are pervasive, although configuration options and their interactions raise complexity of the program and increase maintenance effort. Especially load-time configuration options, such as parameters from command-line options or configuration files, are used with standard programming constructs such as variables and if statements intermixed with the program's implementation; manually tracking configuration options from the time they are loaded to the point where they may influence control-flow decisions is tedious and error prone. We design and implement Lotrack, an extended static taint analysis to automatically track configuration options. Lotrack derives a configuration map that explains for each code fragment under which configurations it may be executed. An evaluation on Android applications shows that Lotrack yields high accuracy with reasonable performance. We use Lotrack to empirically characterize how much of the implementation of Android apps depends on the platform's configuration options or interactions of these options.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2014
Autor(en): Lillack, Max ; Kästner, Christian ; Bodden, Eric
Art des Eintrags: Bibliographie
Titel: Tracking Load-time Configuration Option
Sprache: Deutsch
Publikationsjahr: September 2014
Verlag: ACM
Buchtitel: Proceedings of the 29th ACM/IEEE international conference on Automated software engineering
Reihe: ASE '14
Veranstaltungsort: Vasteras, Sweden
DOI: 10.1145/2642937.2643001
Kurzbeschreibung (Abstract):

Highly-configurable software systems are pervasive, although configuration options and their interactions raise complexity of the program and increase maintenance effort. Especially load-time configuration options, such as parameters from command-line options or configuration files, are used with standard programming constructs such as variables and if statements intermixed with the program's implementation; manually tracking configuration options from the time they are loaded to the point where they may influence control-flow decisions is tedious and error prone. We design and implement Lotrack, an extended static taint analysis to automatically track configuration options. Lotrack derives a configuration map that explains for each code fragment under which configurations it may be executed. An evaluation on Android applications shows that Lotrack yields high accuracy with reasonable performance. We use Lotrack to empirically characterize how much of the implementation of Android apps depends on the platform's configuration options or interactions of these options.

Freie Schlagworte: configuration options, static analysis, variability mining
ID-Nummer: TUD-CS-2014-1096
Fachbereich(e)/-gebiet(e): Profilbereiche > Cybersicherheit (CYSEC)
Profilbereiche
Hinterlegungsdatum: 21 Aug 2017 13:23
Letzte Änderung: 15 Mai 2018 10:33
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen