An overview of the saturn project

Authors:
Alex Aiken;Suhabe Bugrara;Isil Dillig;Thomas Dillig;Brian Hackett;Peter Hawkins
Affiliations:
Stanford University, Stanford, CA;Stanford University, Stanford, CA;Stanford University, Stanford, CA;Stanford University, Stanford, CA;Stanford University, Stanford, CA;Stanford University, Stanford, CA
Venue:
PASTE '07 Proceedings of the 7th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering
Year:
2007

Citing 15
Cited 25

Magic sets and other strange ways to implement logic programs (extended abstract)

PODS '86 Proceedings of the fifth ACM SIGACT-SIGMOD symposium on Principles of database systems
Object-oriented type inference

OOPSLA '91 Conference proceedings on Object-oriented programming systems, languages, and applications
Bounded Model Checking Using Satisfiability Solving

Formal Methods in System Design
Program Analysis Using Mixed Term and Set Constraints

SAS '97 Proceedings of the 4th International Symposium on Static Analysis
CIL: Intermediate Language and Tools for Analysis and Transformation of C Programs

CC '02 Proceedings of the 11th International Conference on Compiler Construction
Tracking pointers with path and context sensitivity for bug detection in C programs

Proceedings of the 9th European software engineering conference held jointly with 11th ACM SIGSOFT international symposium on Foundations of software engineering
The set constraint/CFL reachability connection in practice

Proceedings of the ACM SIGPLAN 2004 conference on Programming language design and implementation
Scalable error detection using boolean satisfiability

Proceedings of the 32nd ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Context-sensitive program analysis as database queries

Proceedings of the twenty-fourth ACM SIGMOD-SIGACT-SIGART symposium on Principles of database systems
Context- and path-sensitive memory leak detection

Proceedings of the 10th European software engineering conference held jointly with 13th ACM SIGSOFT international symposium on Foundations of software engineering
Modular checking for buffer overflows in the large

Proceedings of the 28th international conference on Software engineering
How is aliasing used in systems software?

Proceedings of the 14th ACM SIGSOFT international symposium on Foundations of software engineering
Static error detection using semantic inconsistency inference

Proceedings of the 2007 ACM SIGPLAN conference on Programming language design and implementation
ASTLOG: a language for examining abstract syntax trees

DSL'97 Proceedings of the Conference on Domain-Specific Languages on Conference on Domain-Specific Languages (DSL), 1997
Banshee: a scalable constraint-based analysis toolkit

SAS'05 Proceedings of the 12th international conference on Static Analysis

Sound, complete and scalable path-sensitive analysis

Proceedings of the 2008 ACM SIGPLAN conference on Programming language design and implementation
Loop Summarization Using Abstract Transformers

ATVA '08 Proceedings of the 6th International Symposium on Automated Technology for Verification and Analysis
AutoISES: automatically inferring security specifications and detecting violations

SS'08 Proceedings of the 17th conference on Security symposium
Enforcing the use of API functions in linux code

Proceedings of the 8th workshop on Aspects, components, and patterns for infrastructure software
Interprocedural and Flow-Sensitive Type Analysis for Memory and Type Safety of C Code

Journal of Automated Reasoning
Intra-module Inference

CAV '09 Proceedings of the 21st International Conference on Computer Aided Verification
Serializing C intermediate representations for efficient and portable parsing

Software—Practice & Experience
Reasoning about the unknown in static analysis

Communications of the ACM
Towards scalable modular checking of user-defined properties

VSTTE'10 Proceedings of the Third international conference on Verified software: theories, tools, experiments
Improving software diagnosability via log enhancement

Proceedings of the sixteenth international conference on Architectural support for programming languages and operating systems
Faults in linux: ten years later

Proceedings of the sixteenth international conference on Architectural support for programming languages and operating systems
A decade of software model checking with SLAM

Communications of the ACM
Precise and compact modular procedure summaries for heap manipulating programs

Proceedings of the 32nd ACM SIGPLAN conference on Programming language design and implementation
CDE: using system call interposition to automatically create portable software packages

USENIXATC'11 Proceedings of the 2011 USENIX conference on USENIX annual technical conference
Inferring data polymorphism in systems code

Proceedings of the 19th ACM SIGSOFT symposium and the 13th European conference on Foundations of software engineering
Improving Software Diagnosability via Log Enhancement

ACM Transactions on Computer Systems (TOCS) - Special Issue APLOS 2011
SWIPE: eager erasure of sensitive data in large scale systems software

Proceedings of the second ACM conference on Data and Application Security and Privacy
Fluid updates: beyond strong vs. weak updates

ESOP'10 Proceedings of the 19th European conference on Programming Languages and Systems
CDE: run any Linux application on-demand without installation

LISA'11 Proceedings of the 25th international conference on Large Installation System Administration
Parallelizing top-down interprocedural analyses

Proceedings of the 33rd ACM SIGPLAN conference on Programming Language Design and Implementation
Verification games: making verification fun

Proceedings of the 14th Workshop on Formal Techniques for Java-like Programs
Be conservative: enhancing failure diagnosis with proactive logging

OSDI'12 Proceedings of the 10th USENIX conference on Operating Systems Design and Implementation
A data driven approach for algebraic loop invariants

ESOP'13 Proceedings of the 22nd European conference on Programming Languages and Systems
Scalable and incremental software bug detection

Proceedings of the 2013 9th Joint Meeting on Foundations of Software Engineering
Loop summarization using state and transition invariants

Formal Methods in System Design

Quantified Score

Hi-index	0.03

Visualization

Abstract

We present an overview of the Saturn program analysis system, including a rationale for three major design decisions: the use of function-at-a-time, or summary-based, analysis, the use of constraints, and the use of a logic programming language to express program analysis algorithms. We argue that the combination of summaries and constraints allows Saturn to achieve both great scalability and great precision, while the use of a logic programming language with constraints allows for succinct, high-level expression of program analyses.