Concerto: A Framework for Combined Concrete and Abstract Interpretation
Abstract interpretation promises sound but computable static summarization of program behavior. However, modern software engineering practices pose significant challenges to this vision, specifically the extensive use of frameworks and complex libraries. Frameworks heavily use reflection, metaprogramming, and multiple layers of abstraction, all of which confound even state-of-the-art abstract interpreters. Sound but conservative analysis of frameworks is impractically imprecise, and unsoundly ignoring reflection and metaprogramming is untenable given the prevalence of these features. Manually modeling framework behaviors offers excellent precision, at the cost of immense effort by the tool designer.
To overcome the above difficulties, we present Concerto, a system for analyzing framework-based applications by soundly combining concrete and abstract interpretation. Concerto analyzes framework implementations using concrete interpretation, and application code using abstract interpretation. This technique is possible in practice as framework implementations typically follow a single path of execution when provided a concrete, application-specific configuration file which is often available at analysis time. Concerto exploits this configuration information to precisely resolve reflection and other metaprogramming idioms during concrete execution. In contrast, application code may have infinitely many paths of execution, so Concerto switches to abstract interpretation to analyze application code. Concerto is an analysis framework, and can be instantiated with any abstract interpretation that satisfies a small set of preconditions. In addition, unlike manual modeling, Concerto is not specialized to any specific framework implementation. We have formalized our approach and proved several important properties including soundness and termination. In addition, we have implemented an initial proof of concept prototype of Concerto for a subset of Java, and found that our combined interpretation significantly improves analysis precision and performance.
Fri 18 JanDisplayed time zone: Belfast change
10:35 - 12:03
|A^2 I: Abstract^2 InterpretationDistinguished Paper|
Patrick Cousot , Roberto Giacobazzi University of Verona and IMDEA Software Institute, Francesco Ranzato University of PadovaLink to publication DOI Media Attached File Attached
|Concerto: A Framework for Combined Concrete and Abstract Interpretation|
Research PapersLink to publication DOI Media Attached
|Skeletal Semantics and their Interpretations|
Martin Bodin Imperial College London, Philippa Gardner Imperial College London, Thomas P. Jensen INRIA Rennes, Alan Schmitt InriaLink to publication DOI Pre-print Media Attached File Attached
|Refinement of Path Expressions for Static Analysis|
John Cyphert University of Wisconsin - Madison, Jason Breck University of Wisconsin - Madison, Zachary Kincaid Princeton University, Thomas Reps University of Wisconsin - Madison and GrammaTech, Inc.Link to publication DOI Media Attached File Attached