Correlation exploitation in error ranking

Proceedings of the ACM SIGSOFT Symposium on the Foundations of Software Engineering

Volumn , Issue , 2004, Pages 83-93

  Kremenek, Ted ^a   Ashcraft, Ken ^a   Yang, Junfeng ^a   Engler, Dawson ^a  

^a STANFORD UNIVERSITY   (United States)

Author keywords

Error ranking; Program checking; Static analysis

Indexed keywords

CODES (SYMBOLS); COMPUTATIONAL COMPLEXITY; COMPUTER SYSTEM RECOVERY; DATA REDUCTION; MATHEMATICAL MODELS; PROBABILITY; PROBLEM SOLVING; SERVERS;

CORRELATION EXPLOITATION; ERROR RANKING; PROBLEM CHECKING; STATIC ANALYSIS;

COMPUTER SOFTWARE;

EID: 20344404753     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1029894.1029909     Document Type: Conference Paper

References (25)

1. A. Aiken, M. Faehndrich, and Z. Su. Detecting races in relay ladder logic programs. In TACAS 1998, 1998.
2. T. Ball, M. Naik, and S. K. Rajamani. From symptom to cause: localizing errors in counterexample traces. In POPL 2003, 2003.
3. T. Ball and S. Rajamani. Automatically validating temporal safety properties of interfaces. In SPIN 2001 Workshop on Model Checking of Software, May 2001.
4. W. Bush, J. Pincus, and D. Sielaff. A static analyzer for finding dynamic programming errors. Software: Practice and Experience, 30(7):775-802, 2000.
5. H. Chen and D. Wagner. MOPS: an infrastructure for examining security properties of software. In Proceedings of the 9th ACM conference on Computer and communications security, pages 235-244. ACM Press, 2002.
6. A. Chou, J. Yang, B. Chelf, S. Hallem, and D. Engler. An empirical study of operating systems errors. In SOSP 2001.
7. T. M. Cover and J. A. Thomas. Elements of Information Theory. Wiley Interscience, 1991.
8. R. G. Cowell, A. P. Dawid, S. L. Lauritzen, and D. J. Spiegelhalter. Probabilistic Networks and Expert Systems. Springer, 1999.
9. M. Das, S. Lerner, and M. Seigle. Path-sensitive program verification in polynomial time. In PLDI 2002, 2002.
10. D. Engler, B. Chelf, A. Chou, and S. Hallem. Checking system rules using system-specific, programmer-written compiler extensions. In OSDI 2000, 2000.
11. D. Evans, J. Guttag, J. Horning, and Y. Tan. LCLint: A tool for using specifications to check code. In FSE 1994, 1994.
12. D. Evans and D. Larochelle. Improving security using extensible lightweight static analysis. IEEE Software, 19(1):42-51, January/February 2002.
13. C. Flanagan and S. N. Freund. Type-based race detection for Java. In PLDI 2000, 2000.
14. C. Flanagan, K. Leino, M. Lillibridge, G. Nelson, J. Saxe, and R. Stata. Extended static checking for Java. In PLDI 2002, pages 234-245. ACM Press, 2002.
15. J. Foster, T. Terauchi, and A. Aiken. Flow-sensitive type qualifiers. In PLDI 2002, 2002.
16. P. Good. Permutation Tests: A Practical Guide to Resampling Methods for Testing Hypotheses. Springer, 2000.
17. S. Hallem, B. Chelf, Y. Xie, and D. Engler. A system and language for building system-specific, static analyses. In PLDI 2002, 2002.
18. S. Hangal and M. S. Lam. Tracking down software bugs using automatic anomaly detection. In International Conference on Software Engineering, May 2002.
19. Intrinsa. A technical introduction to PREfix/Enterprise. Technical report, Intrinsa Corporation, 1998.
20. T. Kremenek and D. Engler. Z-Ranking: Using statistical analysis to counter the impact of static analysis approximations. In SAS 2003, 2003.
21. B. Liblit, A. Aiken, A. X. Zheng, and M. I. Jordan. Bug isolation via remote program sampling. In PLDI 2003, 2003.
22. T. J. Ostrand, E. J. Weyuker, and R. M. Bell. Where the bugs are. In ISSTA 2004, 2004.
23. U. Shankar, K. Talwar, J. S. Foster, and D. Wagner. Detecting format string vulnerabilities with type qualifiers. In Proceedings of the 10th USENIX Security Symposium, 2001.
24. D. Wagner, J. Foster, E. Brewer, and A. Aiken. A first step towards automated detection of buffer overrun vulnerabilities. In 2000 NDSSC, Feb. 2000.
25. J. S. Yedidia, W. T. Freeman, and Y. Weiss. Understanding belief propagation and its generalizations. In Exploring Artificial Intelligence in the New Millennium, pages 239-269. Morgan Kaufmann Publishers Inc., 2003.