Integrated static code analysis and runtime verification

Name: Integrated static code analysis and runtime verification
Author: Sözer, Hasan

İsim	Integrated static code analysis and runtime verification
Yazar	Sözer, Hasan
Basım Tarihi:	2015-10
Basım Yeri	- Wiley
Konu	Software verification, Runtime verification, Static code analysis, Model transformations, Tool integration
Tür	Süreli Yayın
Dil	İngilizce
Dijital	Evet
Yazma	Hayır
Kütüphane:	Özyeğin Üniversitesi
Demirbaş Numarası	1097-024X
Kayıt Numarası	3148c4b7-ec38-41e5-95da-9391124210a5
Lokasyon	Computer Science
Tarih	2015-10
Notlar	Due to copyright restrictions, the access to the full text of this article is only available via subscription.
Örnek Metin	Static code analysis tools automatically generate alerts for potential software faults that can lead to failures. However, these tools usually generate a very large number of alerts, some of which are subject to false positives. Because of limited resources, it is usually hard to inspect all the alerts. As a complementary approach, runtime verification techniques verify dynamic system behavior with respect to a set of specifications. However, these specifications are usually created manually based on system requirements and constraints. In this paper, we introduce a noval approach and a toolchain for integrated static code analysis and runtime verification. Alerts that are generated by static code analysis tools are utilized for automatically generating runtime verification specifications. On the other hand, runtime verification results are used for automatically generating filters for static code analysis tools to eliminate false positives. The approach is illustrated for the static analysis and runtime verification of an open-source bibliography reference manager software.
DOI	10.1002/spe.2287
Cilt	45

Kaynağa git Özyeğin Üniversitesi

Aramaya Dön

Özyeğin Üniversitesi

Kaynağa git

Integrated static code analysis and runtime verification

Yazar Sözer, Hasan

Basım Tarihi 2015-10

Basım Yeri - Wiley

Konu Software verification, Runtime verification, Static code analysis, Model transformations, Tool integration

Tür Süreli Yayın

Dil İngilizce

Dijital Evet

Yazma Hayır

Kütüphane Özyeğin Üniversitesi

Demirbaş Numarası 1097-024X

Kayıt Numarası 3148c4b7-ec38-41e5-95da-9391124210a5

Lokasyon Computer Science

Tarih 2015-10

Notlar Due to copyright restrictions, the access to the full text of this article is only available via subscription.

Örnek Metin Static code analysis tools automatically generate alerts for potential software faults that can lead to failures. However, these tools usually generate a very large number of alerts, some of which are subject to false positives. Because of limited resources, it is usually hard to inspect all the alerts. As a complementary approach, runtime verification techniques verify dynamic system behavior with respect to a set of specifications. However, these specifications are usually created manually based on system requirements and constraints. In this paper, we introduce a noval approach and a toolchain for integrated static code analysis and runtime verification. Alerts that are generated by static code analysis tools are utilized for automatically generating runtime verification specifications. On the other hand, runtime verification results are used for automatically generating filters for static code analysis tools to eliminate false positives. The approach is illustrated for the static analysis and runtime verification of an open-source bibliography reference manager software.

DOI 10.1002/spe.2287

Cilt 45