Abstract Interpretation of Symbolic Execution with Explicit State Updates
نویسندگان
چکیده
Interpretation of Symbolic Execution with Explicit State Updates Richard Bubel, Reiner Hähnle, and Benjamin Weiß 1 Department of Computer Science and Engineering, Chalmers University of Technology and Göteborg University {bubel,reiner}@chalmers.se 2 Institute for Theoretical Computer Science, University of Karlsruhe [email protected] Abstract. Systems for deductive software verification model the semantics of their target programming language with full precision. On the other hand, abstraction based approaches work with approximations of the semantics in order to be fully automatic. In this paper we aim at providing a uniform framework for both fully precise and approximate reasoning about programs. We present a sound dynamic logic calculus that integrates abstraction in the sense of abstract interpretation theory. In the second part of the paper, we apply the approach to the analysis of secure information flow. Systems for deductive software verification model the semantics of their target programming language with full precision. On the other hand, abstraction based approaches work with approximations of the semantics in order to be fully automatic. In this paper we aim at providing a uniform framework for both fully precise and approximate reasoning about programs. We present a sound dynamic logic calculus that integrates abstraction in the sense of abstract interpretation theory. In the second part of the paper, we apply the approach to the analysis of secure information flow.
منابع مشابه
Hoare Logic with Updates A Hoare-Style Calculus with Explicit State Updates
We present a verification system for a variant of Hoare-logic that supports proving program correctness by forward symbolic execution. No explicit weakening rules are needed and first-order reasoning is automated. The system is suitable for teaching program verification, because the student can concentrate on reasoning about programs following their natural control flow and proofs are machine-c...
متن کاملA Hoare-Style Calculus with Explicit State Updates
We present a verification system for a variant of Hoare-logic that supports proving by forward symbolic execution. In addition, no explicit weakening rules are needed and first-order reasoning is automated. The system is suitable for teaching program verification, because the student can concentrate on reasoning about programs following their natural control flow and proofs are machine-checked.
متن کاملResearch Statement pdfauthor=Stefan Bucur
Interpretation from Concrete Semantics. Static analysis, and type inference in particular, is helpful for finding programming errors in dynamic languages, as they commonly lack the type information available to compiled languages. However, static analysis engines are implemented by hand, hence sharing the challenges of building a symbolic execution engine. To this end, I want to take the “inter...
متن کاملIntegrating Abstract Caches with Symbolic Pipeline Analysis
Static worst-case execution time analysis of real-time tasks is based on abstract models that capture the timing behavior of the processor on which the tasks run. For complex processors, task-level execution time bounds are obtained by a state space exploration which involves the abstract model and the program. Partial state space exploration is not sound. Symbolic methods using binary decision...
متن کاملSymbolic representations in WCET analysis
Reliable task-level execution time information is indispensable for validating the correct operation of safety-critical embedded real-time systems. Static worst-case execution time (WCET) analysis is a method that computes safe upper bounds of the execution time of single uninterrupted tasks. The method is based on abstract interpretation and involves abstract hardware models that capture the t...
متن کامل