Name
Title | ||
|---|---|---|
Combining Invariant Violation with Execution Path Classification for Detecting Multiple Types of Logical Errors and Race Conditions. |
Abstract | ||
|---|---|---|
Context: Modern automated source code analysis techniques can be very successful in detecting a priori de- fined defect patterns and security vulnerabilities. Yet, they cannot detect flaws that manifest due to erroneous translation of the softwareâs functional requirements into the source code. The automated detection of logical errors that are attributed to a faulty implementation of applicationsâ functionality, is a relatively uncharted territory. In previous research, we proposed a combination of automated analyses for logical error detection. In this paper, we develop a novel business-logic oriented method able to filter mathematical depictions of software logic in order to augment logical error detection, eliminate previous limitations in analysis and provide a formal tested logical error detection classification without subjective discrepancies. As a proof of concept, our method has been implemented in a prototype tool called PLATO that can detect various types of logical errors. Potential logical errors are thus detected that are ranked using a fuzzy logic system with two scales characterizing their impact: (i) a Severity scale, based on the execution pathsâ characteristics and Information Gain, (ii) a Reliability scale, based on the measured programâs Computational Density. The methodâs effectiveness is shown using diverse experiments. Albeit not without restrictions, the proposed automated analysis seems able to detect a wide variety of logical errors, while at the same time limiting the false positives. |
Year | DOI | Venue |
|---|---|---|
2016 | 10.5220/0005947200280040 | SECRYPT |
Keywords | Field | DocType |
Code Classification,Logical Errors,Dynamic Invariants,Source Code,Execution Path,Assertions,Vulnerability,Exploit,Automatic,Analysis,Information Gain,Fuzzy Logic | Functional requirement,Data mining,Logic error,Ranking,Computer security,Source code,Computer science,Fuzzy logic,A priori and a posteriori,Proof of concept,False positive paradox | Conference |
Citations | PageRank | References |
1 | 0.36 | 0 |
Authors | ||
4 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| George Stergiopoulos | 1 | 36 | 9.25 |
| Panagiotis Katsaros | 2 | 262 | 30.51 |
| Dimitris Gritzalis | 3 | 955 | 99.85 |
| Theodore K. Apostolopoulos | 4 | 92 | 17.38 |