Cobra: a light-weight tool for static and dynamic program analysis

详细信息    查看全文

• 作者：Gerard J. Holzmann
• 关键词：Static analysis ; Source code analysis ; Lightweight tools ; Token expression matching ; Dynamic analysis ; Runtime verification
• 刊名：Innovations in Systems and Software Engineering
• 出版年：2017
• 出版时间：March 2017
• 年：2017
• 卷：13
• 期：1
• 页码：35-49
• 全文大小：
• 刊物类别：Computer Science
• 刊物主题：Software Engineering; Computing Methodologies; Computer Applications;
• 出版者：Springer London
• ISSN：1614-5054
• 卷排序：13

文摘

Static source code analysis tools have become indispensable for the development of reliable software applications. The best analyzers can reveal subtle flaws in a code base, but they can also be slow. In part this is due to the collection of detailed information about the possible data and control flow of an application to support the broadest possible range of analyses. For larger code bases it is not unusual that even the best of breed static analyzers can take an hour or more to complete an analysis. In this paper we describe a framework for a much faster, but more light-weight type of static analysis that can support interactive use for standard types of queries. The Cobra tool we designed for this purpose can scale to explore millions of lines of code interactively. The tool is mostly language agnostic, and can therefore easily be configured to resolve even dynamic program analysis queries.