Abstract:Static analysis is a mature field with applications to bug detection, security analysis, and code optimization, etc. To facilitate these applications, static analysis frameworks play an essential role by providing a series of fundamental services such as program abstraction, control flow graph construction, and points-to/alias information computation, etc. However, despite impressive progress of static analysis, and this field has seen several popular frameworks in the last decades, it is still not clear how a static analysis framework should be designed in a way that analysis developers could benefit more: for example, what a good IR (for analysis) ought to look like? What functionalities should the module of fundamental analyses provide to ease client analyses? How to develop and integrate new analysis conveniently? How to manage multiple analyses? To answer these questions, in this work, we discuss the design trade-offs for the crucial components of a static analysis framework, and argue for the most appropriate design by following the HBDC (Harnessing the Best Designs of Classics) principle: for each crucial component, we compare the design choices made for it (possibly) by different classic frameworks such as Soot, WALA, SpotBugs and Doop, and choose arguably the best one, but if none is good enough, we then propose a better design. These selected or newly proposed designs finally constitute Tai-e, a new static analysis framework for Java. Specifically, Tai-e is novel in the designs of several aspects like IR, pointer analysis and development of new analyses, etc., leading to an easy-to-learn, easy-to-use and efficient system. To our knowledge, this is the first work that systematically explores the designs and implementations of various static analysis frameworks, and we believe it provides useful materials and viewpoints for building better static analysis infrastructures.

Towards Rebuilding the Design Model of Programs by Static Analysis and Abstraction

Computation platform for automatic analysis of embedded software systems using model based approach

A text-based analysis approach to representing the design selection process

Parameterized Abstract Model for Reconfigurable Systems

Abstract high-maintainable classes from legacy systems based on formal concepts analysis

Improving Dynamic Code Analysis by Code Abstraction

From Code to Design: A Reverse Engineering Approach

Automatic abstraction for C program

Abstraction-based model checking programs

Towards Code Generation from Design Models.

Automatic approach to recovering OOD models from C++ programs

Detecting Source Code Changes to Maintain the Consistence of Behavioral Model

Geometric Design Model and Object Scanning Mode Based Virtual Assembly and Repair Analysis

An Approach to Automated Conversion from Design Feature Model to Analysis Feature Model

Abstracting Abstract Machines: A Systematic Approach to Higher-Order Program Analysis

A Middleware-based Approach to Model Refactoring at Runtime.

Ontology Model-Based Static Analysis on Java Programs

Simulating Software Behavior Based on UML Activity Diagram

Recovering design patterns to support program comprehension

Tai-e: A Static Analysis Framework for Java by Harnessing the Best Designs of Classics