Framework for Static Analysis of PHP Applications (Artifact)

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216208%3A11320%2F15%3A10320495" target="_blank" >RIV/00216208:11320/15:10320495 - isvavai.cz</a>
Result on the web
<a href="http://d3s.mff.cuni.cz/projects/formal_methods/weverca/" target="_blank" >http://d3s.mff.cuni.cz/projects/formal_methods/weverca/</a>
DOI - Digital Object Identifier
—

Result language
angličtina
Original language name
Framework for Static Analysis of PHP Applications (Artifact)
Original language description
This artifact is based on Weverca, a static analyzer framework for PHP applications. The aim of Weverca is to provide developers with a framework that would allow for an easy implementation of custom static analyses of PHP, while not coping with the dynamic language issues. The framework processes the input source code in two phases. In the first phase, the program-point graph is constructed, which has the dynamic constructs (eval, dynamic includes, type information) already resolved. The developer canthen implement a custom static analysis in the second phase, exploiting the output of the first phase. The provided package is designed to support repeatability of the experiments of the companion paper: in particular to perform security (taint) analysesof two bundled applications. Instruction to compile and run the analyzer are also provided.
Czech name
—
Czech description
—

Project
—
Continuities
I - Institucionalni podpora na dlouhodoby koncepcni rozvoj vyzkumne organizace

Publication year
2015
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Internal product ID
Weverca
Technical parameters
jan.kofron@d3s.mff.cuni.cz
Economical parameters
Nelze aplikovat - jedná se o framework pro implementaci konkrétních nástrojů.
Owner IČO
00216208
Owner name
Univerzita Karlova v Praze

Similar results(10)