Abstract:Static analysis is a mature field with applications to bug detection, security analysis, program understanding, optimization, and more. To facilitate these applications, static analysis frameworks play an essential role by providing a series of fundamental services such as intermediate representation (IR) generation, control flow graph construction, points-to/alias information computation, and so on. However, although static analysis has made great strides and several well-known frameworks have emerged in this field over the past decades, these frameworks are not that easy to learn and use for developers who rely on them to create and implement analyses. In that sense, it is far from trivial to build a developer-friendly static analysis framework, because compared to the knowledge required for static analysis itself, we have significantly less knowledge designing and implementing static analysis frameworks. In this work, we take a step forward by discussing the design trade-offs for the crucial components of a static analysis framework for Java, and select the designs by following the HGDC (Harnessing the Good Designs of Classics) principle: for each crucial component of a static analysis framework, we compare the design choices made for it (possibly) by different classic frameworks such as Soot, Wala, Doop, SpotBugs and Checker, and choose arguably a more appropriate one; but if none is good enough, we then propose a better design. These selected or newly proposed designs finally constitute Tai-e, a new static analysis framework for Java, which has been implemented from scratch. Tai-e is novel in the designs of several aspects like IR, pointer analysis and development of new analyses, etc., leading to a developer-friendly (easy-to-learn and easy-to-use) analysis framework. To the best of our knowledge, this is the first work that systematically explores the designs and implementations of various static analysis frameworks for Java. We expect it to provide useful materials and viewpoints for building better static analysis infrastructures, and we hope that it could draw more attentions of the community to this challenging but tangible topic.

A New Static Analysis Model in Source Code

Static Information Flow Tracking Based Approach to Detect Input Validation Vulnerabilities

Detecting Buffer-Overflow Vulnerabilities in Smart Grid Devices via Automatic Static Analysis

Research on C/C++ Code Static Detection Based on Syntax Tree

Mitigating Access Control Vulnerabilities through Interactive Static Analysis.

Static Detecting Techniques of Software Security Flaws

Research and Implementation of Security Vulnerability Detection in Application System of WEB Static Source Code Analysis Based on JAVA

Static Analyzers and Potential Future Research Directions for Scala: An Overview

Supporting secure programming in web applications through interactive static analysis.

Ontology Model-Based Static Analysis Of Security Vulnerabilities

Source-oriented Software Model Checking and Its Implementation

Enhancing Source Code Representations for Deep Learning with Static Analysis

Ontology Model-Based Static Analysis on Java Programs

Simulink Model Static Analysis Results Based on Abstract Interpretation

Data-Flow Based Model Analysis and Its Applications

An Automatic Examination Method for C Language Code Structure

Unveiling the Power of Intermediate Representations for Static Analysis: A Survey

Tai-e: A Developer-Friendly Static Analysis Framework for Java by Harnessing the Good Designs of Classics.

Customizing Static Analysis using Codesearch

Tai-e: A Static Analysis Framework for Java by Harnessing the Best Designs of Classics

A Hybrid Approach to Detecting Security Defects in Programs