TU Darmstadt / ULB / TUbiblio

Tracking Load-time Configuration Option

Lillack, Max and Kästner, Christian and Bodden, Eric (2014):
Tracking Load-time Configuration Option.
In: Proceedings of the 29th ACM/IEEE international conference on Automated software engineering, ACM, Vasteras, Sweden, In: ASE '14, ISBN 978-1-4503-3013-8,
DOI: 10.1145/2642937.2643001, [Conference or Workshop Item]

Abstract

Highly-configurable software systems are pervasive, although configuration options and their interactions raise complexity of the program and increase maintenance effort. Especially load-time configuration options, such as parameters from command-line options or configuration files, are used with standard programming constructs such as variables and if statements intermixed with the program's implementation; manually tracking configuration options from the time they are loaded to the point where they may influence control-flow decisions is tedious and error prone. We design and implement Lotrack, an extended static taint analysis to automatically track configuration options. Lotrack derives a configuration map that explains for each code fragment under which configurations it may be executed. An evaluation on Android applications shows that Lotrack yields high accuracy with reasonable performance. We use Lotrack to empirically characterize how much of the implementation of Android apps depends on the platform's configuration options or interactions of these options.

Item Type: Conference or Workshop Item
Erschienen: 2014
Creators: Lillack, Max and Kästner, Christian and Bodden, Eric
Title: Tracking Load-time Configuration Option
Language: German
Abstract:

Highly-configurable software systems are pervasive, although configuration options and their interactions raise complexity of the program and increase maintenance effort. Especially load-time configuration options, such as parameters from command-line options or configuration files, are used with standard programming constructs such as variables and if statements intermixed with the program's implementation; manually tracking configuration options from the time they are loaded to the point where they may influence control-flow decisions is tedious and error prone. We design and implement Lotrack, an extended static taint analysis to automatically track configuration options. Lotrack derives a configuration map that explains for each code fragment under which configurations it may be executed. An evaluation on Android applications shows that Lotrack yields high accuracy with reasonable performance. We use Lotrack to empirically characterize how much of the implementation of Android apps depends on the platform's configuration options or interactions of these options.

Title of Book: Proceedings of the 29th ACM/IEEE international conference on Automated software engineering
Series Name: ASE '14
Publisher: ACM
ISBN: 978-1-4503-3013-8
Uncontrolled Keywords: configuration options, static analysis, variability mining
Divisions: Profile Areas > Cybersecurity (CYSEC)
Profile Areas
Event Location: Vasteras, Sweden
Date Deposited: 21 Aug 2017 13:23
DOI: 10.1145/2642937.2643001
Identification Number: TUD-CS-2014-1096
Export:

Optionen (nur für Redakteure)

View Item View Item