Data-flow Analysis of Programs with Associative Arrays
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216208%3A11320%2F14%3A10291165" target="_blank" >RIV/00216208:11320/14:10291165 - isvavai.cz</a>
Result on the web
<a href="http://dx.doi.org/10.4204/EPTCS.150.6" target="_blank" >http://dx.doi.org/10.4204/EPTCS.150.6</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.4204/EPTCS.150.6" target="_blank" >10.4204/EPTCS.150.6</a>
Alternative languages
Result language
angličtina
Original language name
Data-flow Analysis of Programs with Associative Arrays
Original language description
Dynamic programming languages, such as PHP, JavaScript, and Python, provide built-in data structures including associative arrays and objects with similar semantics - object properties can be created at run-time and accessed via arbitrary expressions. While a high level of security and safety of applications written in these languages can be of a particular importance (consider a web application storing sensitive data and providing its functionality worldwide), dynamic data structures pose significant challenges for data-flow analysis making traditional static verification methods both unsound and imprecise. In this paper, we propose a sound and precise approach for value and points-to analysis of programs with associative arrays-like data structures,upon which data-flow analyses can be built. We implemented our approach in a web-application domain - in an analyzer of PHP code.
Czech name
—
Czech description
—
Classification
Type
D - Article in proceedings
CEP classification
IN - Informatics
OECD FORD branch
—
Result continuities
Project
<a href="/en/project/GA14-11384S" target="_blank" >GA14-11384S: Automatic Formal Analysis and Verification of Programs with Complex Unbounded Data and Control Structures</a><br>
Continuities
S - Specificky vyzkum na vysokych skolach
Others
Publication year
2014
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Article name in the collection
Proceedings Third International Workshop on Engineering Safety and Security Systems
ISBN
—
ISSN
2075-2180
e-ISSN
—
Number of pages
15
Pages from-to
56-70
Publisher name
EPTCS
Place of publication
Neuveden
Event location
Singapore
Event date
May 13, 2014
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
—