Program analysis for bug detection using parfait: invited talk

The goal of the Parfait project is to find bugs in C source code in a scalable and precise way. To this end, Parfait was designed as a framework with layers of sound program analyses, multiple layers per bug type, to identify bugs in a program more quickly and accurately. Parfait also aims to identify security bugs, i.e., bugs that may be exploited by a malicious user. To this end, an optional preprocessing step is available to reduce the scope of potential bugs of interest. To evaluate Parfait’s precision and recall, we have developed BegBunch, a bug benchmarking suite that contains existing synthetic benchmarks and samples of bugs (“bug kernels”) taken from open source code. Categories and Subject Descriptors D.2.4 [Software Engineering]: Software/Program Verification; D.2.8 [Software Engineering]: Metrics General Terms Verification Keywords Constant propagation, Partial evaluation, Symbolic analysis

• Type: Conference
• Year: 2009
• Where: PEPM
• Authors: Cristina Cifuentes, Nathan Keynes, Lian Li, Bernhard Scholz
• Keywords: Parfait Project, PEPM 2009, Potential Bugs, Security Bugs, Software Engineering