Combination of abstractions in the ASTRÉE static analyzer

Authors:
Patrick Cousot;Radhia Cousot;Jérôme Feret;Laurent Mauborgne;Antoine Miné;David Monniaux;Xavier Rival
Affiliations:
École Normale Supérieure, Paris, France;Centre National de la Recherche Scientifique;École Normale Supérieure, Paris, France;École Normale Supérieure, Paris, France;École Normale Supérieure, Paris, France;École Normale Supérieure, Paris, France;Centre National de la Recherche Scientifique and École Normale Supérieure, Paris, France
Venue:
ASIAN'06 Proceedings of the 11th Asian computing science conference on Advances in computer science: secure software and related issues
Year:
2006

Citing 12
Cited 21

Abstract interpretation: a unified lattice model for static analysis of programs by construction or approximation of fixpoints

POPL '77 Proceedings of the 4th ACM SIGACT-SIGPLAN symposium on Principles of programming languages
Systematic design of program analysis frameworks

POPL '79 Proceedings of the 6th ACM SIGACT-SIGPLAN symposium on Principles of programming languages
A static analyzer for large safety-critical software

PLDI '03 Proceedings of the ACM SIGPLAN 2003 conference on Programming language design and implementation
Design and implementation of a special-purpose static program analyzer for safety-critical real-time embedded software

The essence of computation
Field-sensitive value analysis of embedded C programs with union types and pointer arithmetics

Proceedings of the 2006 ACM SIGPLAN/SIGBED conference on Language, compilers, and tool support for embedded systems
The octagon abstract domain

Higher-Order and Symbolic Computation
Software verification with BLAST

SPIN'03 Proceedings of the 10th international conference on Model checking software
The parallel implementation of the astrée static analyzer

APLAS'05 Proceedings of the Third Asian conference on Programming Languages and Systems
The arithmetic-geometric progression abstract domain

VMCAI'05 Proceedings of the 6th international conference on Verification, Model Checking, and Abstract Interpretation
Trace partitioning in abstract interpretation based static analyzers

ESOP'05 Proceedings of the 14th European conference on Programming Languages and Systems
The ASTREÉ analyzer

ESOP'05 Proceedings of the 14th European conference on Programming Languages and Systems
Symbolic methods to enhance the precision of numerical abstract domains

VMCAI'06 Proceedings of the 7th international conference on Verification, Model Checking, and Abstract Interpretation

Proving the absence of run-time errors in safety-critical avionics code

EMSOFT '07 Proceedings of the 7th ACM & IEEE international conference on Embedded software
The Verification Grand Challenge and Abstract Interpretation

Verified Software: Theories, Tools, Experiments
Pointer Analysis, Conditional Soundness, and Proving the Absence of Errors

SAS '08 Proceedings of the 15th international symposium on Static Analysis
A Unified Approach to Abstract Interpretation, Formal Verification and Testing of C/C++ Modules

Proceedings of the 5th international colloquium on Theoretical Aspects of Computing
Abstract Interpretation of FIFO Replacement

SAS '09 Proceedings of the 16th International Symposium on Static Analysis
Refining Abstract Interpretation-Based Static Analyses with Hints

APLAS '09 Proceedings of the 7th Asian Symposium on Programming Languages and Systems
Why does Astrée scale up?

Formal Methods in System Design
Static analysis by abstract interpretation of embedded critical software

ACM SIGSOFT Software Engineering Notes
A parametric segmentation functor for fully automatic and scalable array content analysis

Proceedings of the 38th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Static contract checking with abstract interpretation

FoVeOOS'10 Proceedings of the 2010 international conference on Formal verification of object-oriented software
Automated test case generation with SMT-solving and abstract interpretation

NFM'11 Proceedings of the Third international conference on NASA Formal methods
Using bounded model checking to focus fixpoint iterations

SAS'11 Proceedings of the 18th international conference on Static analysis
Widening with thresholds for programs with complex control graphs

ATVA'11 Proceedings of the 9th international conference on Automated technology for verification and analysis
Automatic code generation from event-B models

Proceedings of the Second Symposium on Information and Communication Technology
Integrated and automated abstract interpretation, verification and testing of c/c++ modules

Concurrency, Compositionality, and Correctness
A generic ellipsoid abstract domain for linear time invariant systems

Proceedings of the 15th ACM international conference on Hybrid Systems: Computation and Control
Critical systems development methodology using formal techniques

Proceedings of the Third Symposium on Information and Communication Technology
Conditional model checking: a technique to pass information between verifiers

Proceedings of the ACM SIGSOFT 20th International Symposium on the Foundations of Software Engineering
Theories, solvers and static analysis by abstract interpretation

Journal of the ACM (JACM)
Linux driver verification

ISoLA'12 Proceedings of the 5th international conference on Leveraging Applications of Formal Methods, Verification and Validation: applications and case studies - Volume Part II
How to combine widening and narrowing for non-monotonic systems of equations

Proceedings of the 34th ACM SIGPLAN conference on Programming language design and implementation

Quantified Score

Hi-index	0.00

Visualization

Abstract

We describe the structure of the abstract domains in the ASTRÉE static analyzer, their modular organization into a hierarchical network, their cooperation to over-approximate the conjunction/reduced product of different abstractions and to ensure termination using collaborative widenings and narrowings. This separation of the abstraction into a combination of cooperative abstract domains makes ASTRÉE extensible, an essential feature to cope with false alarms and ultimately provide sound formal verification of the absence of runtime errors in very large software.