Taming false alarms from a domain-unaware C analyzer by a bayesian statistical post analysis

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3672 LNCS, Issue , 2005, Pages 203-217

  Jung, Yungbum ^a   Kim, Jaehwang ^a   Shin, Jaeho ^a   Yi, Kwangkeun ^a  

^a Seoul National University   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SCIENCE; COSTS; ERROR ANALYSIS; MATHEMATICAL PROGRAMMING; PROBABILITY; THRESHOLD ELEMENTS;

BAYESIAN STATISTICAL POST ANALYSIS; COST-ACCURACY IMPROVEMENT; LINUX KERNEL SOURCES; TRUE-ALARM PROBABILITIES;

STATISTICAL MECHANICS;

EID: 33646050367     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11547662_15     Document Type: Conference Paper

References (14)

1. bugtraq. www.securityfocus.com.
2. CERT/CC advisories. www.cert.org/advisories.
3. James O. Berger. Statistical Decision Theory and Bayesian Analysis, 2nd Edition. Springer, 1985.
4. Bruno Blanchet, Patric Cousot, Radhia Cousot, Jerome Feret, Laurent Mauborgne, Antonie Mine, David Monnizux, and Xavier Rival. A static analyzer for large safety-critical software. In Proceedings of the SIGPLAN Conference on Programming Language Design and Implementation, pages 196-207, June 2003.
5. Patrick Cousot and Radhia Cousot. Comparing the galois connection and widening/narrowing approaches to abstract interpretation. In PLILP '92: Proceedings of the 4th International Symposium on Programming Language Implementation and Logic Programming, pages 269-295. Springer-Verlag, 1992.
6. Patrick Cousot, Radhia Cousot, Jérôme Feret, Laurent Mauborgne, Antoine Miné, David Monniaux, and Xavier Rival. The astrée analyzer. In M. Sagiv, editor, European Symposium on Programming (ESOP'05), volume 3444 of Lecture Notes in Computer Science, pages 21-30. Springer-Verlag, 2005.
7. Nurit Dor, Michael Rodeh, and Mooly Sagiv. Cssv: towards a realistic tool for statically detecting all buffer overflows in c. In PLDI '03: Proceedings of the ACM SIGPLAN 2003 conference on Programming language design and implementation, pages 155-167, ACM Press, 2003.
8. Andrew Gelman, John B. Carlin, Hal S. Stern, and Donald B. Rubin. Bayesian Data Analysis. Text in Statistical Science. Chapman & Mail/CRC, second edition edition, 2004.
9. David Hovemeyer and William Pugh. Finding bugs is easy. SIGPLAN Not., 39(12):92-106, 2004.
10. Ted Kremenek and Dawson Engler. Z-ranking: Using statistical analysis to counter the impact of static analysis approximations. In Radhia Cousot, editor, SAS '03: Proceedings of the 10th Annual International Static Analysis Symposium, volume 2694 of Lecture Notes in Computer Science, pages 295-315. Springer, 2003.
11. Laurent Mauborgne and Xavier Rival. Trace partitioning in abstract interpretation based static analyzers. In M. Sagiv, editor, European Symposium on Programming (ESOP'05), volume 3444 of Lecture Notes in Computer Science, pages 5-20. Springer-Verlag, 2005.
12. N. Metropolis and S. Ulam. The Monte Carlo method. Journal of the American Statistical Association, 44(247):335-341, September 1949.
13. Yichen Xie, Andy Chou, and Dawson Engler. Archer: using symbolic, path-sensitive analysis to detect memory access errors. In ESEC/FSE-11: Proceedings of the 9th European software engineering conference held jointly with 11th ACM SIGSOFT international symposium on Foundations of software engineering, pages 327-336. ACM Press, 2003.
14. Misha Zitser, Richard Lippmann, and Tim Leek. Testing static analysis tools using exploitable buffer overflows from open source code. In SIGSOFT '04/FSE-12: Proceedings of the 12th ACM SIGSOFT twelfth international symposium on Foundations of software engineering, pages 97-106. ACM Press, 2004.