Position paper: Static flow-sensitive & context-sensitive information-flow analysis for software product lines

PLAS'12 - Proceedings of Programming Languages and Analysis for Security

Volumn , Issue , 2012, Pages

  Bodden, Eric ^a  

^a DARMSTADT UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

IDE; IFDS; information flow control; software product lines; static analysis

Indexed keywords

CONTEXT-SENSITIVE; IDE; IFDS; INFORMATION FLOW ANALYSIS; INFORMATION FLOW CONTROL; INSECURE INFORMATION FLOWS; ORDERS OF MAGNITUDE; POSITION PAPERS; PRODUCT-LINES; SINGLE PASS; SOFTWARE PRODUCT LINE; SOFTWARE PRODUCTS;

COMPUTER PROGRAMMING LANGUAGES; NETWORK ARCHITECTURE; SECURITY OF DATA; STATIC ANALYSIS;

SOFTWARE DESIGN;

EID: 84865289872     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2336717.2336723     Document Type: Conference Paper

References (10)

1. The Eclipse IDE. http://eclipse.org/.
2. Claus Brabrand, Márcio Ribeiro, Társis Tolêdo, and Paulo Borba. Intraprocedural dataflow analysis for software product lines. In AOSD 2012, March 2012. To appear.
3. Andreas Classen, Patrick Heymans, Pierre-Yves Schobbens, Axel Legay, and Jean-François Raskin. Model checking lots of systems: efficient verification of temporal properties in software product lines. In ICSE 2010, pages 335-344, 2010.
4. Salvatore Guarnieri, Marco Pistoia, Omer Tripp, Julian Dolby, Stephen Teilhet, and Ryan Berg. Saving the world wide web from vulnerable javascript. In ISSTA 2011, pages 177-187, New York, NY, USA, 2011. ACM.
5. C. Kästner. Virtual Separation of Concerns. PhD thesis, Universität Magdeburg, 2010.
6. Jörg Liebig, Christian Kästner, and Sven Apel. Analyzing the discipline of preprocessor annotations in 30 million lines of c code. In AOSD 2011, pages 191-202, New York, NY, USA, 2011. ACM.
7. Yin Liu and Ana Milanova. Static information flow analysis with handling of implicit flows and a study on effects of implicit flows vs explicit flows. In Proceedings of the 2010 14th European Conference on Software Maintenance and Reengineering, CSMR '10, pages 146-155, Washington, DC, USA, 2010. IEEE Computer Society.
8. Vijay Sundaresan Patrick Lam Etienne Gagnon Raja Vallée-Rai, Laurie Hendren and Phong Co. Soot - a Java optimization framework. In Proceedings of CASCON 1999, pages 125-135, 1999.
9. Thomas Reps, Susan Horwitz, and Mooly Sagiv. Precise interprocedural dataflow analysis via graph reachability. In Proceedings of the 22nd ACM SIGPLAN-SIGACT symposium on Principles of programming languages, POPL '95, pages 49-61, New York, NY, USA, 1995. ACM.
10. Mooly Sagiv, Thomas Reps, and Susan Horwitz. Precise interprocedural dataflow analysis with applications to constant propagation. In TAPSOFT '95, pages 131-170, Amsterdam, The Netherlands, The Netherlands, 1996. Elsevier Science Publishers B. V.