Prioritizing software inspection results using static profiling

Proceedings - Sixth IEEE International Workshop on Source Code Analysis and Manipulation, SCAM 2006

Volumn , Issue , 2006, Pages 149-158

  Boogerd, Cathal ^a   Moonen, Leon ^a  

^a DELFT UNIVERSITY OF TECHNOLOGY   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

APPROXIMATION THEORY; CODES (SYMBOLS); COMPUTATION THEORY; COMPUTER AIDED SOFTWARE ENGINEERING; STATISTICAL METHODS;

AUTOMATED SOFTWARE INSPECTION; DYNAMIC PROFILING; ELAN; SOFTWARE CHECKING TOOLS;

COMPUTER SOFTWARE SELECTION AND EVALUATION;

EID: 34547711005     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SCAM.2006.22     Document Type: Conference Paper

References (41)

1. R. Abreu, P. Zoeteweij, and A. J. C. van Gemund. Program spectra analysis in embedded systems: A case study. In 12th Ann. Conf. of the Advanced School for Computing and Imaging (ASCI'06). ASCI, June 2006.
2. T. Ball and J. R. Larus. Branch prediction for free. In ACM Conf. on Programming Language Design and Implementation (PLDI'93), pages 300-313, June 1993.
3. D. Beyer, A. J. Chlipala, T. A. Henzinger, R. Jhala, and R. Majumdar. The blast query language for software verification.. In 11th Intl. Static Analysis Symp. (SAS 2004), volume 3148 of LNCS, pages 2-18. Springer, 2004.
4. D. Binkley. Interprocedural constant propagation using dependence graphs and a data-flow model. In 5th Intl. Conf. on Compiler Construction (CC'94), volume 786 of LNCS, pages 374-388. Springer, 1994.
5. W. Blume and R. Eigenmann. Demand-driven, symbolic range propagation. In 8th Intl. Workshop on Languages and Compilers for Parallel Computing, (LCPC'95), volume 1033 of LNCS, pages 141-160. Springer, 1995.
6. W. R. Bush, J. D. Pincus, and D. J. Sielaff. A static analyzer for finding dynamic programming errors. Softw. Pract. Exp., 30(7):775-802, 2000.
7. S. Chaki, E. Clarke, A. Groce, S. Jha, and H. Veith. Modular verification of software components in C. IEEE Trans. Softw. Eng., 30(6):388-402, 2004.
8. H. Chen and D. Wagner. MOPS: an infrastructure for examining security properties of software. In 9th ACM Conf. on Computer and Communications Security (CCS'02), pages 235-244. ACM, 2002.
9. M. Das, S. Lerner, and M. Seigle. ESP: path-sensitive program verification in polynomial time. In ACM Conf. on Programming Language Design and Implementation (PLDI'02), pages 57-68. ACM, 2002.
10. B. L. Deitrich, B-C. Cheng, and W. W. Hwu. Improving static branch prediction in a compiler. In 18th Ann. Intl. Conf. on Parallel Architectures and Compilation Techniques (PACT'98), pages 214-221. IEEE, 1998.
11. D. Engler, B. Chelf, A. Chou, and S. Hallem. Checking system rules using system-specific, programmer-written compiler extensions. In 4th Symp. on Operating Systems Design and Implementation, pages 1-16, October 2000.
12. D. Evans, J. Guttag, J. Horning, and Y.M. Tan. LCLint: A tool for using specifications to check code. In 2nd ACM Symp. on the Foundations of Software Engineering, pages 87-96, 1994.
13. D. Evans and D. Larochelle. Improving security using extensible lightweight static analysis. IEEE Softw., 19(1):42-51, 2002.
14. M. E. Fagan. Design and code inspections to reduce errors in program development. IBM Syst. Jour., 15(3):182-211, 1976.
15. J. A. Fisher and S. M. Freudenberger. Predicting conditional branch directions from previous runs of a program. In 5th Intl. Conf. on Architectural Support for Programming Languages and Operating Systems, pages 85-95, 1992.
16. C. Flanagan, K. R. M. Leino, M. Lillibridge, G. Nelson, J. B. Saxe, and R. Stata. Extended static checking for java. In ACM Conference on Programming language design and implementation (PLDI'02), pages 234-245. ACM, 2002.
17. J. Foster. Type Qualifiers: Lightweight Specifications to Improve Software Quality. PhD thesis, Univ. of California, Berkeley, Dec. 2002.
18. Shafer G. A Mathematical Theory of Evidence. Princeton Univ. Press, 1976.
19. T. Gilb and D. Graham. Software Inspection. Addison-Wesley, 1993.
20. S. Horwitz, T. W. Reps, and D. Binkley. Interprocedural slicing using dependence graphs. ACM Trans. Program. Lang. Syst., 12(1):26-60, 1990.
21. R. Johnson and D. Wagner. Finding user/kernel pointer bugs with type inference. In 13th Usenix Security Symp., pages 119-134, Aug. 2004.
22. S. C. Johnson. Lint, a C program checker. In Unix Programmer's Manual, volume 2A, chapter 15, pages 292-303. Bell Labs, 1978.
23. J. Knoop and O. Rüthing. Constant propagation on the value graph: Simple constants and beyond. In 9th Intl. Conf. on Compiler Construction (CC 2000), volume 1781 of LNCS, pages 94-109. Springer, 2000.
24. T. Kremenek and D. R. Engler. Z-ranking: Using Statistical analysis to counter the impact of static analysis approximations. In 10th Intl. Static Analysis Symp. (SAS 2003), volume 2694 of LNCS, pages 295-315. Springer, 2003.
25. J. R. C. Patterson. Accurate static branch prediction by value range propagation. In ACM Conf. on Programming Language Design and Implementation (PLDI'95), pages 67-78, 1995.
26. A. A. Porter, H. Siy, A. Mockus, and L.G. Votta. Understanding the sources of variation in software inspections. ACM Trans. Softw. Eng. Meth., 7(1):41-79, 1998.
27. G. W. Russell. Experience with inspection in ultralarge-scale developments. IEEE Softw., 8(1):25-31, 1991.
28. S. Sagiv, T. W. Reps, and S. Horwitz. Precise interprocedural dataflow analysis with applications to constant propagation. In 6th Intl. Conf. on Theory and Practice of Software Development (TAPSOFT'95), volume 915 of LNCS, pages 651-665. Springer, 1995.
29. M. Shapiro and S. Horwitz. Fast and accurate flow-insensitive points-to analysis. In 24th ACM Symp. on Principles of Programming Languages (POPL'97), pages 1-14, Jan. 1997.
30. Secure Software. Rats: Rough auditing tool for security. http://www.securesoftware.com/resources/tools.html.
31. C. Verbrugge, P. Co, and L.J. Hendren. Generalized constant propagation: A study in C. In 6th Intl. Conf. on Compiler Construction (CC'96), volume 1060 of LNCS, pages 74-90. Springer, 1996.
32. J. Viega, J. T. Bloch, Y. Kohno, and G. McGraw. ITS4: A static vulnerability scanner for C and C++ code. In 16th Ann. Computer Security Applications Conf. (ACSAC 2000). IEEE, Dec. 2000.
33. J.M. Voas and K.W. Miller. Software testability: The new verification. IEEE Softw., pages 17-28, 1995.
34. D. Wagner, J. S. Foster, E. A. Brewer, and A. Aiken. A first step towards automated detection of buffer overrun vulnerabilities. In Network and Distributed System Security Symp., pages 3-17, Feb. 2000.
35. T. A. Wagner, V. Maverick, S. L. Graham, and M. A. Harrison. Accurate static estimators for program optimization. In ACM Conf. on Programming Language Design and Implementation (PLDV94), pages 85-96, 1994.
36. D. W. Wall. Predicting program behavior using real or estimated profiles. In ACM Conf. on Programming Language Design and Implementation (PLDI'91), pages 59-70, June 1991.
37. D.Wheeler. Flawfinder. http://www.dwheeler.com/flawfinder/.
38. D. A. Wheeler, B. Brykczynski, and Jr. R. N. Meeson, editors. Software Inspection : An Industry Best Practice. IEEE, 1996.
39. C. Wohlin, A. Aurum, H. Petersson, F. Shull, and M. Ciolkowski. Software inspection benchmarking - a qualitative and quantitative comparative opportunity. In 8th Intl. Software Metrics Symp. (METRICS 2002). IEEE, 2002.
40. Y. Wu and J. R. Larus. Static branch frequency and program profile analysis. In 27th Ann. Intl. Symp. on Microarchitecture, pages 1-11. ACM/IEEE, 1994.
41. J. Yang, T. Kremenek, Y. Xie, and D. Engler. MECA: an extensible, expressive system and language for statically checking security properties. In 10th ACM Conf. on Computer and Communications Security, 2003.