Static Analysis

A self-contained introduction to abstract interpretation–based static analysis, an essential resource for students, developers, and users. Static program analysis, or static analysis, aims to discover semantic properties of programs without running them. It plays an important role in all phases of development, including verification of specifications and programs, the synthesis of optimized code, and the refactoring and maintenance of software applications. This book offers a self-contained introduction to static analysis, covering the basics of both theoretical foundations and practical considerations in the use of static analysis tools. By offering a quick and comprehensive introduction for nonspecialists, the book fills a notable gap in the literature, which until now has consisted largely of scientific articles on advanced topics. The text covers the mathematical foundations of static analysis, including semantics, semantic abstraction, and computation of program invariants; more advanced notions and techniques, including techniques for enhancing the cost-accuracy balance of analysis and abstractions for advanced programming features and answering a wide range of semantic questions; and techniques for implementing and using static analysis tools. It begins with background information and an intuitive and informal introduction to the main static analysis principles and techniques. It then formalizes the scientific foundations of program analysis techniques, considers practical aspects of implementation, and presents more advanced applications. The book can be used as a textbook in advanced undergraduate and graduate courses in static analysis and program verification, and as a reference for users, developers, and experts.

The First Expert Guide to Static Analysis for Software Security! Creating secure code requires more than just good intentions. Programmers need to know that their code will be safe in an almost infinite number of scenarios and configurations. Static source code analysis gives users the ability to review their work with a fine-toothed comb and uncover the kinds of errors that lead directly to security vulnerabilities. Now, there’s a complete guide to static analysis: how it works, how to integrate it into the software development processes, and how to make the most of it during security code review. Static analysis experts Brian Chess and Jacob West look at the most common types of security defects that occur today. They illustrate main points using Java and C code examples taken from real-world security incidents, showing how coding errors are exploited, how they could have been prevented, and how static analysis can rapidly uncover similar mistakes. This book is for everyone concerned with building more secure software: developers, security engineers, analysts, and testers.

This book constitutes the refereed proceedings of the 13th International Symposium on Static Analysis, SAS 2006. The book presents 23 revised full papers together with the abstracts of 3 invited talks. The papers address all aspects of static analysis including program and systems verification, shape analysis and logic, termination analysis, bug detection, compiler optimization, software maintenance, security and safety, abstract interpretation and algorithms, abstract domain and data structures and more.

This book constitutes the thoroughly refereed proceedings of the 20th International Symposium on Static Analysis, SAS 2013, held in Seattle, WA, USA, in June 2013. The 23 revised full papers presented together with 2 invited talks were selected from 56 submissions. The papers address all aspects of static analysis, including abstract domains, abstract interpretation, abstract testing, bug detection, data flow analysis, model checking, new applications, program transformation, program verification, security analysis, theoretical frameworks, and type checking.

This book constitutes the refereed proceedings of the 16th International Symposium on Static Analysis, SAS 2010, held in Perpignan, France in September 2010. The conference was co-located with 3 affiliated workshops: NSAD 2010 (Workshop on Numerical and Symbolic Abstract Domains), SASB 2010 (Workshop on Static Analysis and Systems Biology) and TAPAS 2010 (Tools for Automatic Program Analysis). The 22 revised full papers presented together with 4 invited talks were carefully reviewed and selected from 58 submissions. The papers address all aspects of static analysis including abstract domains, bug detection, data flow analysis, logic programming, systems analysis, type inference, cache analysis, flow analysis, verification, abstract testing, compiler optimization and program verification.

This book constitutes the refereed proceedings of the 24th International Static Analysis Symposium, SAS 2017, held in New York, NY, USA, in August/September 2017. The 22 papers presented in this volume were carefully reviewed and selected from 50 submissions. The papers cover various aspects of the presentation of theoretical, practical, and applicational advances in area of static analysis that is recognized as a fundamental tool for program verification, bug detection, compiler organization, program understanding, and software maintenance.

This book constitutes the refereed proceedings of the 7th International Static Analysis Symposium, SAS 2000, held in Santa Barbara, CA, USA, in June/July 2000. The 20 revised full papers presented were carefully reviewed and selected from 52 submissions. Also included are 2 invited full papers. All current aspects of high-performance implementation and verification of programming languages are addressed, in particular object logics, model checking, constraint solving, abstract interpretation, program transformation, rewriting, confidentiality analysis, typed languages, unified analysis, code optimization, termination, code specialization, and guided abstraction.

This book constitutes the refereed proceedings of the 29th International Symposium on Static Analysis, SAS 2022, held in Auckland, New Zealand, in December 2022. The 18 full papers included in this book were carefully reviewed and selected from 43 submissions. Static analysis is widely recognized as a fundamental tool for program verification, bug detection, compiler optimization, program understanding, and software maintenance. The papers deal with theoretical, practical and application advances in the area.