Static analysis for independent app developers

Brutschy, Lucas; Ferrara, Pietro; Müller, Péter

doi:10.1145/2660193.2660219

Cited by 6 publications

(3 citation statements)

References 33 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This means that our new library can be directly plugged into any program analyzer already using APRON, which we demonstrate by running several existing analyzers [6,8,24,25], showing massive speedups for the Octagon operators as well as significant speedups for end-to-end analysis times. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page.…”

Section: Introductionmentioning

confidence: 87%

See 1 more Smart Citation

Making numerical program analysis fast

Singh

Püschel

Vechev

2015

Proceedings of the 36th ACM SIGPLAN Conference on Programming Language Design and Implementation

View full text Add to dashboard Cite

Numerical abstract domains are a fundamental component in modern static program analysis and are used in a wide range of scenarios (e.g. computing array bounds, disjointness, etc). However, analysis with these domains can be very expensive, deeply affecting the scalability and practical applicability of the static analysis. Hence, it is critical to ensure that these domains are made highly efficient.In this work, we present a complete approach for optimizing the performance of the Octagon numerical abstract domain, a domain shown to be particularly effective in practice. Our optimization approach is based on two key insights: i) the ability to perform online decomposition of the octagons leading to a massive reduction in operation counts, and ii) leveraging classic performance optimizations from linear algebra such as vectorization, locality of reference, scalar replacement and others, for improving the key bottlenecks of the domain. Applying these ideas, we designed new algorithms for the core Octagon operators with better asymptotic runtime than prior work and combined them with the optimization techniques to achieve high actual performance. We implemented our approach in the Octagon operators exported by the popular APRON C library, thus enabling existing static analyzers using APRON to immediately benefit from our work.To demonstrate the performance benefits of our approach, we evaluated our framework on four published static analyzers showing massive speedups for the time spent in Octagon analysis (e.g., up to 146x) as well as significant end-to-end program analysis speedups (up to 18.7x). Based on these results, we believe that our framework can serve as a new basis for static analysis with the Octagon numerical domain.

show abstract

Section: Introductionmentioning

confidence: 87%

“…The second analyzer, TOUCHBOOST(TB) [8], analyzes eventdriven TouchDevelop applications. The analyzer is written in Scala and runs on top of Sample [14].…”

Section: Methodsmentioning

confidence: 99%

Making numerical program analysis fast

Singh

Püschel

Vechev

2015

Proceedings of the 36th ACM SIGPLAN Conference on Programming Language Design and Implementation

View full text Add to dashboard Cite

show abstract

“…In this talk we present TouchGuru [1], a static analysis for TouchDevelop scripts. Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page.…”

Section: Introductionmentioning

confidence: 99%

TouchGuru

Brutschy

Ferrara

Müller

2014

Proceedings of the 2nd International Workshop on Mobile Development Lifecycle

Self Cite

View full text Add to dashboard Cite

Mobile apps often expose bugs only under specific environment conditions or after specific interactions, making it hard to detect them via testing. By approximating the program behavior under all possible conditions, static analysis is able to fill this gap. In this invited talk, we present TouchGuru, a static analyzer for Microsoft TouchDevelop scripts. In particular, we present how the design of TouchGuru takes into account the user's perspective.

show abstract