Author
Kılıç, Yunus, Sözer, Hasan
Publication Date
2017
Publication Place
-
ACM
Subject
Software verification, Runtime verification, Static code analysis, Model transformations, Tool integration
Type
Document
Language
English
Digital
Yes
Manuscript
No
Library
Özyeğin University
Library Asset ID
978-1-4503-4486-9
Record ID
ed1899ad-f832-4a24-bfa2-383d44af8980
Library Location
Computer Science
Date
2017
Notes
Due to copyright restrictions, the access to the full text of this article is only available via subscription.
Sample Text
Runtime verification techniques verify dynamic system behavior with respect to a set of specifications. These specifications are often created manually based on system requirements and constraints. In this paper, we introduce a rule-based approach for automatically generating runtime verification specifications based on alerts that are reported by static code analysis tools. We define a set of rules to be checked for an alert type. Violations of these rules indicate either the absence or existence of an actual bug designated by the instances of that alert type. Formal verification specifications are automatically generated for each reported alert instance based on the defined rules. Then, runtime monitors are automatically synthesized and integrated to the system. These monitors report detected errors or false positive alerts during software execution. The approach is applied on two open source software systems.
DOI
10.1145/3019612.3019822
