CS 6304: Program Analysis and its Applications
Fall 2015

Note: after week 2, these are student prepared presentations of the papers on the Topics by the Week page.

• Week 1
  • Lecture 1: Classial Dataflow Analysis
  • Lecture 2: Foundations of Dataflow Analysis corrected 8/27/15
  
  
• Week 2
  Lecture 3: Data and Control Dependences
  
  
• Week 3
  • Class Hierarchy Analysis - Dean, Grove, Chambers, ECOOP 1995
  
  
  • Rapid Type Analysis - Bacon and Sweeney, OOPSLA 1996
  
  
  • Field-sensitive Points-to Analysis for Java using Annotated Contraints - Rountev, Milanova, Ryder, OOPSLA 2001
  
  
  • Extra notes on annotated constraints in points-to analysis
  
  
  
• Week 4
  • An Assessment of Call Graph Construction (for OOPLs)- Grove et al., OOPSLA 1997
  
  
  • Parameterized Object Sensitivity for Points-to Analysis of Java - MIlanova et al., ISSTA 2002
  
  
  • Context-sensitive Points-to Analysis: is it worth it? (Java - Lhotek & Hendren, CC 2003)
  
  
• Week 5
  • TAJS - Static analysis of JavaScript - Jensen et al., SAS 2009
  
  
  • Correlation Tracking analysis - Sridharan et al., ECOOP 2012
  
  
  • JSAI Framework for JavaScript Analysis, Kashyap et al., FSE 2014
  
  
• Week 6
  • State-sensitive Points-to Analysis for the Dynamic Behavior of JavaScript Objects
  
  
  • Introspective Analysis: Context-sensitivity, Across the Board, PLDI 2014
  
  
  • Practical Static Analysis of JavaScript Applications in the Presence of Frameworks and Libraries, PLDI 2014
  
  
• Week 7
  • Efficient path profiling. MICRO 1996
  
  
  • Whole Program Paths, PLDI 1999,
  
  
  • An analysis of the dynamic behavior of JavaScript programs, PLDI 2010,
  
  
• Week 8
  • Program Slicing, IEEE TSE 1984
  
  
  • Thin Slicing, PLDI 2007
  
  
  • Precise Dynamic Slicing, ICSE 2003 (best paper award)
  
  
• Week 9
  • Intrusion Detection Via Static Analysis, IEEE S\& P,2001
  
  
  • WASP - Protecting Web Appliations Using Positive Tainting and Styntax-aware Evaluation, IEEE TSE Jan/Feb 2008
  
  
• Week 10
  • Information Flow, CACM 1997
  
  
  • TAJ - Static Taint Tool, PLDI 2009
  
  
  • FlowDroid, PLDI 2014
  
  
  • Apposcopy - Static Malware Detection, FSE 2014
  
  
• Week 11
  • Yang et.al, Static Control-flow Analysis of User-driven Callbacks in Android, ICSE 2015
  
  
  • Enck et.al, TaintDroid, OSDI 2010
  
  
  • Hay et.al, Dynamic Detecton of Inter-app Communication Vulnerabilities in Android, ISSTA 2015
  
  
• Week 12
  • King, Symbolic Execution and Program Testing, CACM 2976
  
  
  • Godefroid et al., DART_ Directed Automated Random Testing, PLDi 2005
  
  
  • Cadar et al., Symbolic Execution for Software Testing: Three Decades Later, CACM Feb 2013
  
  
• Week 13
  • Dufour et al., A Scalable Technique for Characterizing th Usage of Temporaries in Framework-intensive Java Applications, FSE 2008
  
  
  • Tripp et al., Hybrid Security Analysis of Web JavaSCript Code via Dynamic Partial Evauation, ISSTA 2014
  
  
  • Artzi et al., Combined Static and Dynamic Mutability Analysis, ASE 2007
  
  
• Week 14
  • Gordon et al. Informaiton Flow Analysis of Android Applications in DroidSafe, NDSS 2015
  
  
  • Holkner and Harland, Evaluating the Dynamic Behavior of Python Apps, ACCS 2009
  
  
  • Zhang et al. Locating Faults through Automated Predicate Switching, ICSE 2006
  
  
  

  last updated at 9:25pm December 61, 2015 BGR