Context-Sensitive Interprocedural Defect Detection Based on a Unified Symbolic Procedure Summary Model

Zhao, Yisong; Gong, Yi; Liu, Li; Xiao, Qing; Zhou, Yang

doi:10.1109/qsic.2011.15

Cited by 13 publications

(10 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…If there is a path from Na to Nb, function fa calls fb. We can get the location of the call point by finding the foreground summary fa [5,6] . Finally, we can determine the dominant alarm by analyzing the logical execution order of Na and the node calling fb.…”

Section: Dominant Alarmmentioning

confidence: 99%

Dominant Alarm Research and Implementation Based on Static Defect Detection

Jiao¹,

Jin²,

Zhou³

2018

dtcse

View full text Add to dashboard Cite

Abstract. Code defect detection technology plays an increasingly important role in software testing, but the problem of large number of alarms and high false positive rate is common, thus, the efficiency and difficulty of manual confirmation has seriously hindered the development of this technology. This paper proposes a generation method of dominant alarm, which can effectively reduce the number of the human confirmations and improve validation efficiency. Firstly, by analyzing the feature function of the alarms, the alarms with the same data source can be classified as a collection called 'Equivalent class collection'. Then, the dominant alarm in the equivalent class collection is determined by examining the contextual relationship of the codes where the alarm exits in the collection. Finally, the confirmation of the alarms in the collection can be accomplished by confirming the dominant alarm only. The experiment results show that this method can effectively improve the human conformation efficiency of 20%-30%.

show abstract

Section: Dominant Alarmmentioning

confidence: 99%

Dominant Alarm Research and Implementation Based on Static Defect Detection

Jiao¹,

Jin²,

Zhou³

2018

dtcse

View full text Add to dashboard Cite

show abstract

“…What information to capture in each procedure summary has been carefully tuned so that the summary should not lose any common defect-related behaviour? Because of limited space, we do not explain our inter-procedural analysis, see [8,10] for details.…”

Section: B Correlation Definitionmentioning

confidence: 99%

Research of alarm correlations based on static defect detection

et al. 2015

View full text Add to dashboard Cite

Original scientific paper Traditional static defect detection tools can detect software defects and report alarms, but the correlations among alarms are not identified and massive independent alarms are against the understanding. Helping users in the alarm verification task is a major challenge for current static defect detection tools. In this paper, we formally introduce alarm correlations. If the occurrence of one alarm causes another alarm, we say that they are correlated. If one dominant alarm is uniquely correlated with another, we know verifying the first will also verify the others. Guided by the correlation, we can reduce the number of alarms required for verification. Our algorithms are inter-procedural, path-sensitive, and scalable. We present a correlation procedure summary model for inter-procedural alarm correlation calculation. The underlying algorithms are implemented inside our defect detection tools. We chose one common semantic fault as a case study and proved that our method has the effect of reducing 34,23 % of workload. Using correlation information, we are able to automate the alarm verification that previously had to be done manually. Keywords: abstract interpretation; alarm correlations; alarm verification; correlation summary; state slicing Istraživanje korelacija alarma na temelju detekcije statičkog kvaraIzvorni znanstveni članak Tradicionalni alati za detekciju statičkog kvara mogu detektirati kvarove softvera i objaviti alarm, ali korelacije između alarma nisu identificirane i masivni nezavisni alarmi protivni su razumijevanju. Pomaganje korisnicima u verifikaciji alarma predstavlja veliki izazov postojećim alatima za detekciju statičke greške. U ovom radu mi formalno uvodimo korelacije alarma. Ako postojanje jednog alarma uzrokuje drugi, kažemo da su u korelaciji. Ako je jedan dominantni alarm jedinstveno povezan s drugim, znamo da će se verifikacijom jednoga također verificirati drugi. Na osnovu korelacije možemo reducirati broj alarma potrebnih za verifikaciju. Naši su algoritmi inter-proceduralni, osjetljivi na putanju i podesivi (scalable). Mi prikazujemo sumarni model postupka korelacije za računanje inter-proceduralne korelacije alarma. Osnovni algoritmi su implementirani u naše alate za detekciju kvara. Izabrali smo jednu uobičajenu semantičku pogrešku za analizu slučaja i dokazali da naša metoda rezultira smanjenjem radnog opterećenja za 34,23 %. Primjenom korelacijeske informacije možemo automatizirati verifikaciju alarma, što se ranije moralo raditi ručno.

show abstract

“…Interprocedural analysis is a well-understood static analysis technique [1] since procedure call is popular in programs [2]. An effective method for interprocedural analysis is computing procedure summary [3][4][5][6][7][8][9], which can be thought of as some succinct representation of the behavior 1 of the procedure that is also parametrized by any information about its input variables. Each procedure is analyzed once to construct its procedure summary; and once a procedure is called, it will be substituted by its summary at call site.…”

Section: Introductionmentioning

confidence: 99%

Symbolic Procedure Summary Using Region-based Symbolic Three-valued Logic

Dong¹,

Jin²,

Gong³

2014

JCP

Self Cite

View full text Add to dashboard Cite

One of the bottlenecks in interprocedural analysis is the difficulty in handling complex parameters. This paper proposes a novel approach to solve this problem: symbolic procedure summary, which is constructed using regionbased symbolic three-valued logic (RSTVL). RSTVL is a memory model that can describe memory state of variables and all kinds of associations among them. Based on the result of intraprocedural analysis, we construct symbolic procedure summary described by RSTVL, and instantiate it at call site using the calling context. Our approach improves analysis precision as it achieves context-sensitive and fieldsensitive interprocedural analysis. We apply this approach in defect detection, and experimental results show that it can effectively reduce both false negatives and false positives of defect detecting, and improve test accuracy at the same time.

show abstract

Context-Sensitive Interprocedural Defect Detection Based on a Unified Symbolic Procedure Summary Model

Cited by 13 publications

References 25 publications

Dominant Alarm Research and Implementation Based on Static Defect Detection

Dominant Alarm Research and Implementation Based on Static Defect Detection

Research of alarm correlations based on static defect detection

Symbolic Procedure Summary Using Region-based Symbolic Three-valued Logic

Contact Info

Product

Resources

About