SABER: Smart analysis based error reduction

ISSTA 2004 - Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis

Volumn , Issue , 2004, Pages 243-251

  Reimer, Darrell ^a   Schonberg, Edith ^a   Srinivas, Kavitha ^a   Srinivasan, Harini ^a   Alpern, Bowen ^a   Johnson, Robert D ^a   Kershenbaum, Aaron ^a   Koved, Larry ^a  

^a IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Defect Understanding; Frameworks; Program analysis

Indexed keywords

ALGORITHMS; COMPUTER AIDED SOFTWARE ENGINEERING; COMPUTER PROGRAMMING; CONCURRENCY CONTROL; ERROR DETECTION; ITERATIVE METHODS; MAGNETIC DOMAINS; MATHEMATICAL MODELS; STATISTICAL METHODS;

DEFECT UNDERSTANDING; FRAMEWORKS; PATTERN DETECTION ALGORITHMS; PROGRAM ANALYSIS; SABER TOOL;

CODING ERRORS;

EID: 23744480722     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. A.V. Aho, R. Sethi, and J.D. Ullman, Compilers principles, techniques, and tools. AddisonWesley, Reading, MA, 1986.
2. D. Alur, J. Crupi, D. Malks, Core J2EE Patterns: Best Practices and Design Strategies, Prentice Hall, June 2001.
3. M. Das, S. Lerner, M. Seigle. ESP: Path-Sensitive Program Verification in Linear Time, In Proc. of PLDI 2002.
4. T. Ball and S. K. Rajamani. The SLAM project: debugging system software via static analysis, In Proc. of the 29th POPL, January 2002, 1-3.
5. W. R. Bush, J. D. Pincus, and D. J. Sielaff. A static analyzer for finding dynamic programming errors. Software Practice and Experience, 30 (7), June 2000, 775-802.
6. H. Chen and D. Wagner. MOPS: an infrastructure for examining security properties of software, In Proc. of the Ninth ACM Conference on Computer and Communications Security (Washington, DC, November 2002), 235-244.
7. J-D Choi, M. Gupta, M. J. Serrano, V. C. Sreedhar, S. Midkiff, Escape Analysis For Java, In Proc. of OOPSLA, October 1999, 1-19.
8. J. Corbett, M. Dwyer, J. Hatcliff, C. Pasareanu, Robby, S. Laubach, H. Zheng. Bandera: Extracting Finite-state Models from Java Source Code, In Proc. of ICSE, June 2000.
9. D. L. Detlefs. An overview of the extended static checking system. SIGSOFT Proceedings of the First Workshop on Formal Methods in Software Practice, January 1996, 1-9.
10. M. Emami, R. Ghiya, and L. Hendren. Context-sensitive interprocedural points-to analysis in the presence of function pointers, In Proc. of PLDI, June 1994, 242-257.
11. D. Engler, B. Chelf, A. Chou and S. Hallem, Checking System Rules Using System-Specific, Programmer-Written Compiler Extensions, In Proc. of SOSP, October 2000, 1-16.
12. D. Evans. Static Detection of Dynamic Memory Errors. In Proc. of PLDI, May 1996, 44-53.
13. S. Hallem, B. Chelf, Y. Xie and D. Engler, A System and Language for Building System-Specific, Static Analyses, In Proc. of PLDI, June 2002, 69-82.
14. D. Hovemeyer and W. Pugh, Finding Bugs is Easy, http://www.cs.umd.edu/~pugh/java/bugs/docs/findbugsPaper.pdf
15. D. Jackson. Aspect: Detecting bugs with abstract dependencies. ACM Trans. on Software Engineering and Methodology, 4 (2), April 1995, 109-145.
16. Java™ 2 Platform, Standard Edition, v 1.4.2 API Specification, http://java.sun.com/j2se/1.4.2/docs/api/index.html
17. S.C. Johnson. Lint, a C program checker. Unix Programmer's Manual, 4.2 Berkeley Software Distribution Supplementary Docs; U.C. Berkeley, 1984.
18. L. Koved, JABA-JAva Bytecode Analysis nhttp://www.research.ibm.com/javasec/JaBA.html.
19. L. Koved, M. Pistoia, and A. Kershenbaum. Access rights analysis for Java, In Proc. of OOPSLA, Nov 2002.
20. Object Technology International, Inc. Eclipse platform technical overview, July 2001, http://www.eclipse.org/whitepapers/eclipse-overview.pdf.
21. Parasoft Corporation. Automatic Java[TM] software and component testing: using Jtest to automate unit testing and coding standard enforcement, http://www.parasoft.com/jsp/products/article.jsp?articleId=839&product= Jtest.
22. J. Viega, J. T. Bloch, T. Kohno, G. McGraw. ITS4: A Static Vulnerability Scanner for C and C++ Code, In Proc. of the 16th Annual Computer Security Applications Conference, December 2000, 257-269.