Abstract:Context: Specification mining techniques are typically used to extract the specification of a software in the absence of (up-to-date) specification documents. This is useful for program comprehension, testing, and anomaly detection. However, specification mining can also potentially be used for debugging, where a faulty behavior is abstracted to give developers a context about the bug and help them locating it. Objective: In this project, we investigate this idea in an industrial setting. We propose a very basic semi-automated specification mining approach for debugging and apply that on real reported issues from an AutoPilot software system from our industry partner, MicroPilot Inc. The objective is to assess the feasibility and usefulness of the approach in a real-world setting. Method: The approach is developed as a prototype tool, working on C code, which accept a set of relevant state fields and functions, per issue, and generates an extended finite state machine that represents the faulty behavior, abstracted with respect to the relevant context (the selected fields and functions). Results: We qualitatively evaluate the approach by a set of interviews (including observational studies) with the company's developers on their real-world reported bugs. The results show that a) our approach is feasible, b) it can be automated to some extent, and c) brings advantages over only using their code-level debugging tools. We also compared this approach with traditional fully automated state-merging algorithms and reported several issues when applying those techniques on a real-world debugging context. Conclusion: The main conclusion of this study is that the idea of an "interactive" specification mining rather than a fully automated mining tool is NOT impractical and indeed is useful for the debugging use case.

Specification Mining for Smart Contracts with Automatic Abstraction Tuning

Specification Mining for Smart Contracts with Trace Slicing and Predicate Abstraction

Midas: Mining Profitable Exploits in On-Chain Smart Contracts Via Feedback-Driven Fuzzing and Differential Analysis

Towards Automated Reentrancy Detection for Smart Contracts Based on Sequential Models

Specification is Law: Safe Creation and Upgrade of Ethereum Smart Contracts

A Survey of Smart Contract Formal Specification and Verification

Mining Secure Behavior of Hardware Designs

AutoMTLSpec: Learning to Generate MTL Specifications from Natural Language Contracts

From Legal Contracts to Formal Specifications: A Systematic Literature Review

Building Executable Secure Design Models for Smart Contracts with Formal Methods

Mining Software Specifications: Methodologies and Applications

Mining Effective Temporal Specifications from Heterogeneous API Data

Enabling Open-World Specification Mining via Unsupervised Learning

Leveraging Fine-Tuned Language Models for Efficient and Accurate Smart Contract Auditing

Interactive semi-automated specification mining for debugging: An experience report

Rich Specifications for Ethereum Smart Contract Verification

Two Timin': Repairing Smart Contracts With A Two-Layered Approach

Combining Fine-Tuning and LLM-based Agents for Intuitive Smart Contract Auditing with Justifications

A New Smart Contract Anomaly Detection Method by Fusing Opcode and Source Code Features for Blockchain Services

LLM-SmartAudit: Advanced Smart Contract Vulnerability Detection

An Empirical Study on Practicality of Specification Mining Algorithms on a Real-world Application