Applying dynamic analysis for defect detection in Java-applications

• Published in: Труды Института системного программирования РАН
• Main Authors: Sergey Vartanov, Alexander Gerasimov
• Format: Article
• Language: English
• Published: Russian Academy of Sciences, Ivannikov Institute for System Programming 2018-10-01
• Subjects: итеративный динамичеcкий анализ программ; автоматический поиск ошибок; анализ java программ; software iterative dynamic analysis; automatic defect detection; java bytecode instrumentation
• Online Access: https://ispranproceedings.elpub.ru/jour/article/view/870
• ISSN: 2079-8156; 2220-6426

This paper provides an overview of program analysis techniques and describes practical implementation of these techniques for automatic software defect detection. The paper focuses on program dynamic analysis technique based on tainted data flow tracing, instrumentation and constraint set construction for automatic input generation. An overview of practical considerations for developing a dynamic analysis tool for Java applications is given. It is complemented by a detailed description of actual prototype implementation created within the scope of this project. Finally, the paper features an overview of practical results obtained on a number of Java applications and provides an evaluation of these results.