Selective X-sensitive analysis guided by impact pre-analysis

Hakjoo Oh, Wonchan Lee, Kihong Heo, Hongseok Yang, Kwangkeun Yi

Research output: Contribution to journalArticlepeer-review

11 Citations (Scopus)

Abstract

We present a method for selectively applying context-sensitivity during interprocedural program analysis. Our method applies context-sensitivity only when and where doing so is likely to improve the precision that matters for resolving given queries. The idea is to use a pre-analysis to estimate the impact of contextsensitivity on the main analysis's precision, and to use this information to find out when and where the main analysis should turn on or off its context-sensitivity. We formalize this approach and prove that the analysis always benefits from the pre-analysis-guided context-sensitivity. We implemented this selective method for an existing industrial-strength interval analyzer for full C. The method reduced the number of (false) alarms by 24.4% while increasing the analysis cost by 27.8% on average. The use of the selective method is not limited to context-sensitivity. We demonstrate this generality by following the same principle and developing a selective relational analysis and a selective flow-sensitive analysis. Our experiments show that the method cost-effectively improves the precision in the these analyses as well.

Original languageEnglish
Article number6
JournalACM Transactions on Programming Languages and Systems
Volume38
Issue number2
DOIs
Publication statusPublished - 2015 Dec

Bibliographical note

Funding Information:
This work was supported by the Engineering Research Center of Excellence Program of Korea Ministry of Science, ICT, and Future Planning (MSIP)/National Research Foundation of Korea (NRF) (grant NRF-2008- 0062609), and by Samsung Electronics Software Center. This work was partly supported by an Institute for Information & Communications Technology Promotion (IITP) grant funded by the Korean government (MSIP): B0101-15-0557 (Resilient Cyber-Physical Systems Research) and (R0190-15-2011 (Development of Vulnerability Discovery Technologies for IoT Software Security). H. Yang was supported by EPSRC.

ASJC Scopus subject areas

  • Software

Fingerprint

Dive into the research topics of 'Selective X-sensitive analysis guided by impact pre-analysis'. Together they form a unique fingerprint.

Cite this