Anzeige
Erschienen in:
2013 | OriginalPaper | Buchkapitel
Automated Inference of Library Specifications for Source-Sink Property Verification
verfasst von : Haiyan Zhu, Thomas Dillig, Isil Dillig
Erschienen in: Programming Languages and Systems
Verlag: Springer International Publishing
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Many safety properties in program analysis, such as many memory safety and information flow problems, can be formulated as
source-sink
problems. While there are many existing techniques for checking source-sink properties, the soundness of these techniques relies on all relevant source code being available for analysis. Unfortunately, many programs make use of libraries whose source code is either not available or not amenable to precise static analysis. This paper addresses this limitation of source-sink verifiers through a technique for inferring exactly those library specifications that are needed for verifying the client program. We have applied the proposed technique for tracking explicit information flow in Android applications, and we show that our method effectively identifies the needed specifications of the Android SDK.