CAJ | 학술논문

该文把静态分析技术与基于模型的演绎验证结合起来提供了一个框架,分析应用源代码,自动生成一个分析器,它能够推断关于给定程序行为的逻辑约束方面的信息.该文引入了一阶逻辑断言来描述API调用语义.这些断言构成分析器使用的模型.通过实验,该方法可被用来识别Java程序中的关于安全的逻辑错误.
해문파정태분석기술여기우모형적연역험증결합기래제공료일개광가,분석응용원대마,자동생성일개분석기,타능구추단관우급정정서행위적라집약속방면적신식.해문인입료일계라집단언래묘술API조용어의.저사단언구성분석기사용적모형.통과실험,해방법가피용래식별Java정서중적관우안전적라집착오.
This paper introduces a framework, which combines the static analysis technology and the deductive verification based on model. It is used for analysis of application source code, automatically generating an analyzer, which can give the inferred infor?mation on the logic of a given constraints of program behavior. This paper introduces first-order logic assertions to describe seman?tics of the API calls. These assertions constitute the model used by the analyzer. Through the experiment, this method can be used to identify the logic errors about the security in Java program.