In our new publication SPLLIFT — Statically Analyzing Software Product Lines in Minutes Instead of Years (to appear at PLDI’13) we show how to efficiently conduct inter-procedural, flow-sensitive, context-sensitive data-flow analysis for software product lines. Previously, such analyses would have taken years, due to the many software configurations a product line encodes. Our approach SPLlift processes the entire product line at once, and typically within minutes, without any loss of precision. It works for any IFDS-based data-flow analysis. SPLlift is available as an open-source extension to our IFDS/IDE solver Heros. To access our benchmark data, click here. This is joint work with Mira Mezini, Claus Brabrand, Társis Tolêdo, Márcio Ribeiro and Paulo Borba. Read the rest of this entry »
Analyzing Software Product Lines in Minutes instead of Years (updated)
Eric | February 18, 2013AOSD 2013 – Early registration ends February 24th
Eric | February 18, 2013Early-registration rates for AOSD 2013 are only available for six more days, so register now to benefit from the discount.
Java and flash as a gateway for hackers
Eric | February 14, 2013My colleague Ben Hermann gave an interview today on recent attacks on the Java and Flash platforms, what those attacks mean for end users and how such users can protect themselves. Ben is a member of Mira Mezini’s Software Technology Group which is closely collaborating with my own research group to develop automated software analysis tools that will in the near future allow software developers to identify possible security vulnerabilities upfront.