MQP:Static Analysis Tools - Revision history

J at 20:25, 26 August 2008

2008-08-26T20:25:33Z

Jpolitz: /* References */

2008-08-26T14:58:10Z

‎References

Jpolitz: /* Soot */

2008-08-26T14:55:53Z

‎Soot

Jpolitz: /* Soot */

2008-08-26T14:55:29Z

‎Soot

Jpolitz at 14:54, 26 August 2008

2008-08-26T14:54:32Z

Jpolitz: New page: {{#categorytree:MQP|hideroot|mode=pages}} ==What We're Looking For== For the kind of static analysis we're doing, some sort of a call graph is needed to model the flow of the program and...

2008-08-25T19:56:41Z

New page: {{#categorytree:MQP|hideroot|mode=pages}} ==What We're Looking For== For the kind of static analysis we're doing, some sort of a call graph is needed to model the flow of the program and...

New page

{{#categorytree:MQP|hideroot|mode=pages}}

==What We're Looking For==

For the kind of static analysis we're doing, some sort of a call graph is needed to model the flow of the program and where calls to checkPermissions are going to be found. To that end, we investigated some static analysis tools that provide models of Java code and ways to inspect it.

More tools may be added as the project continues.
{{Incomplete}}

==Some Tools==

====Java Compiler API====

The Java Compiler API provides access to the functionality of the Java Compiler, most notably the ability to create an Abstract Syntax Tree of some set of Java code. This is a straightforward tool, but does not seem to have any simple provision for creating a customizable call graph, which would be ideal for our application.

====NetBeans API for Call Hierarchy====

NetBeans has an API for accessing the code model used internally in the program. NetBeans itself does have a sort of call graph functionality in the "Call Hierarchy" tool. This could prove useful, but at this point in time we would rather focus on tools that aren't dependent on an IDE, and let us create a standalone application.

====Soot====

Soot is a "Java optimization framework," and provides a large number of tools that can (and have been) used to perform static analysis of Java programs. Soot has a number of features that we are looking for:
# Analyzes Java source, bytecode, and class files
# Creates a call graph based on class hierarchy
# Is free and open source (LGPL License)
# Can be used outside any IDE
# Is tested by use in a number of research applications
# Has a other static analysis applications (data flow analysis, points-to analysis) which could be applicable to security

Soot is a likely candidate for use in the security static analysis.

====Other Tools====

Other tools that were looked at and may be considered for reference are TACLE (Type Analysis and Call Graph Construction for Eclipse), and a program verification tool called Bandera that used Soot and has an implementation of their own CallGraph class. Other tools may be considered or added as the project continues.

==References==
#Soot - http://www.sable.mcgill.ca/soot/
#NetBeans API for Call Hierarchy (in Java Source package) - http://bits.netbeans.org/dev/javadoc/index.html
#javac API - http://java.sun.com/javase/6/docs/technotes/guides/javac/index.html

[[Category:MQP]]

@@ Line 1: / Line 1: @@
-{{#categorytree:MQP|hideroot|mode=pages}}
+{{MQP:Navbar}}
 ==What We're Looking For==
@@ Line 39: / Line 40: @@
 #javac API - http://java.sun.com/javase/6/docs/technotes/guides/javac/index.html
 #Larry Koved's excellent paper on access rights analysis for java - [http://www.research.ibm.com/javasec/OOPSLA2002preprint.pdf Access Rights Analysis for Java]

@@ Line 28: / Line 28: @@
 # Has a other static analysis applications (data flow analysis, points-to analysis) which could be applicable to security
-Soot is a likely candidate for use in the security static analysis.  [MQP:More on Soot|More on Soot]
+Soot is a likely candidate for use in the security static analysis.  [[MQP:More on Soot|More on Soot]]
 ====Other Tools====

@@ Line 38: / Line 38: @@
 #NetBeans API for Call Hierarchy (in Java Source package) - http://bits.netbeans.org/dev/javadoc/index.html
 #javac API - http://java.sun.com/javase/6/docs/technotes/guides/javac/index.html
-#Larry Koved's excellent paper on access rights analysis for java - [http://portal.acm.org/ft_gateway.cfm?id=582452&type=pdf&coll=GUIDE&dl=GUIDE&CFID=634220&CFTOKEN=95929885 Access Rights Analysis for Java]
+#Larry Koved's excellent paper on access rights analysis for java - [http://www.research.ibm.com/javasec/OOPSLA2002preprint.pdf Access Rights Analysis for Java]
 [[Category:MQP]]