Generating runtime verification specifications based on static code analysis alerts

Name: Generating runtime verification specifications based on static code analysis alerts
Author: Kılıç, Yunus, Sözer, Hasan

İsim	Generating runtime verification specifications based on static code analysis alerts
Yazar	Kılıç, Yunus, Sözer, Hasan
Basım Tarihi:	2017
Basım Yeri	- ACM
Konu	Software verification, Runtime verification, Static code analysis, Model transformations, Tool integration
Tür	Belge
Dil	İngilizce
Dijital	Evet
Yazma	Hayır
Kütüphane:	Özyeğin Üniversitesi
Demirbaş Numarası	978-1-4503-4486-9
Kayıt Numarası	ed1899ad-f832-4a24-bfa2-383d44af8980
Lokasyon	Computer Science
Tarih	2017
Notlar	Due to copyright restrictions, the access to the full text of this article is only available via subscription.
Örnek Metin	Runtime verification techniques verify dynamic system behavior with respect to a set of specifications. These specifications are often created manually based on system requirements and constraints. In this paper, we introduce a rule-based approach for automatically generating runtime verification specifications based on alerts that are reported by static code analysis tools. We define a set of rules to be checked for an alert type. Violations of these rules indicate either the absence or existence of an actual bug designated by the instances of that alert type. Formal verification specifications are automatically generated for each reported alert instance based on the defined rules. Then, runtime monitors are automatically synthesized and integrated to the system. These monitors report detected errors or false positive alerts during software execution. The approach is applied on two open source software systems.
DOI	10.1145/3019612.3019822

Kaynağa git Özyeğin Üniversitesi

Aramaya Dön

Özyeğin Üniversitesi

Kaynağa git

Generating runtime verification specifications based on static code analysis alerts

Yazar Kılıç, Yunus, Sözer, Hasan

Basım Tarihi 2017

Basım Yeri - ACM

Konu Software verification, Runtime verification, Static code analysis, Model transformations, Tool integration

Tür Belge

Dil İngilizce

Dijital Evet

Yazma Hayır

Kütüphane Özyeğin Üniversitesi

Demirbaş Numarası 978-1-4503-4486-9

Kayıt Numarası ed1899ad-f832-4a24-bfa2-383d44af8980

Lokasyon Computer Science

Tarih 2017

Notlar Due to copyright restrictions, the access to the full text of this article is only available via subscription.

Örnek Metin Runtime verification techniques verify dynamic system behavior with respect to a set of specifications. These specifications are often created manually based on system requirements and constraints. In this paper, we introduce a rule-based approach for automatically generating runtime verification specifications based on alerts that are reported by static code analysis tools. We define a set of rules to be checked for an alert type. Violations of these rules indicate either the absence or existence of an actual bug designated by the instances of that alert type. Formal verification specifications are automatically generated for each reported alert instance based on the defined rules. Then, runtime monitors are automatically synthesized and integrated to the system. These monitors report detected errors or false positive alerts during software execution. The approach is applied on two open source software systems.

DOI 10.1145/3019612.3019822