SWAN: A Static Analysis Framework for Swift

被引:6
作者
Tiganov, Daniil [1 ]
Cho, Jeff [1 ]
Ali, Karim [1 ]
Dolby, Julian [2 ]
机构
[1] Univ Alberta, Edmonton, AB, Canada
[2] IBM Res, Yorktown Hts, NY USA
来源
PROCEEDINGS OF THE 28TH ACM JOINT MEETING ON EUROPEAN SOFTWARE ENGINEERING CONFERENCE AND SYMPOSIUM ON THE FOUNDATIONS OF SOFTWARE ENGINEERING (ESEC/FSE '20) | 2020年
基金
加拿大自然科学与工程研究理事会;
关键词
Swift; static analysis; taint analysis;
D O I
10.1145/3368089.3417924
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Swift is an open-source programming language and Apple's recommended choice for app development. Given the global widespread use of Apple devices, the ability to analyze Swift programs has significant impact on millions of users. Although static analysis frameworks exist for various computing platforms, there is a lack of comparable tools for Swift. While LLVM and Clang support some analyses for Swift, they are either primarily dynamic analyses or not suitable for deeper analyses of Swift programs such as taint tracking. Moreover, other existing tools for Swift only help enforce code styles and best practices. In this paper, we present SWAN, an open-source framework that allows robust program analyses of Swift programs using IBM's T.J. Watson Libraries for Analysis (WALA). To provide a wide range of analyses for Swift, SWAN leverages the well-established libraries in WALA. SWAN is publicly available at https://github.com/themaplelab/swan. We have also made a screencast available at https//youtu.be/AZwfhOGqwFs.
引用
收藏
页码:1640 / 1644
页数:5
相关论文
共 50 条
  • [31] iABC: Towards a hybrid framework for analyzing and classifying behaviour of iOS applications using static and dynamic analysis
    Bhatt, Arpita Jadhav
    Gupta, Chetna
    Mittal, Sangeeta
    JOURNAL OF INFORMATION SECURITY AND APPLICATIONS, 2018, 41 : 144 - 158
  • [32] Androlic: An Extensible Flow, Context, Object, Field, and Path-Sensitive Static Analysis Framework for Android
    Pan, Linjie
    Cui, Baoquan
    Yan, Jiwei
    Ma, Xutong
    Yan, Jun
    Zhang, Jian
    PROCEEDINGS OF THE 28TH ACM SIGSOFT INTERNATIONAL SYMPOSIUM ON SOFTWARE TESTING AND ANALYSIS (ISSTA '19), 2019, : 394 - 397
  • [33] Static Privacy Analysis by Flow Reconstruction of Tainted Data
    Ferrara, Pietro
    Olivieri, Luca
    Spoto, Fausto
    INTERNATIONAL JOURNAL OF SOFTWARE ENGINEERING AND KNOWLEDGE ENGINEERING, 2021, 31 (07) : 973 - 1016
  • [34] A general framework for static profiling of parametric resource usage
    Lopez-Garcia, P.
    Klemen, M.
    Liqat, U.
    Hermenegildo, M. V.
    THEORY AND PRACTICE OF LOGIC PROGRAMMING, 2016, 16 : 849 - 865
  • [35] A New Static-based Framework for Ransomware Detection
    Medhat, May
    Gaber, Samir
    Abdelbaki, Nashwa
    2018 16TH IEEE INT CONF ON DEPENDABLE, AUTONOM AND SECURE COMP, 16TH IEEE INT CONF ON PERVAS INTELLIGENCE AND COMP, 4TH IEEE INT CONF ON BIG DATA INTELLIGENCE AND COMP, 3RD IEEE CYBER SCI AND TECHNOL CONGRESS (DASC/PICOM/DATACOM/CYBERSCITECH), 2018, : 710 - 715
  • [36] STATIC CABLE ANALYSIS
    Gopcevic, Spiro
    Brcic, Stanko
    Zugic, Ljiljana
    GRADEVNSKI MATERIJIALI I KONSTRUKCIJE-BUILDING MATERIALS AND STRUCTURES, 2011, 54 (03): : 19 - 43
  • [37] Static Analysis in Motion
    Chess, Brian
    Britton, Kris
    Eng, Chris
    Pugh, Bill
    Raghavan, Lakshmikanth
    West, Jacob
    IEEE SECURITY & PRIVACY, 2012, 10 (03) : 53 - 56
  • [38] Debugging Static Analysis
    Do, Lisa Nguyen Quang
    Kruger, Stefan
    Hill, Patrick
    Ali, Karim
    Bodden, Eric
    IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 2020, 46 (07) : 697 - 709
  • [39] Static Analysis at GitHub
    Clem T.
    Thomson P.
    Queue, 2021, 19 (04): : 42 - 67
  • [40] Towards a fair comparison and realistic evaluation framework of android malware detectors based on static analysis and machine learning
    Molina-Coronado, Borja
    Mori, Usue
    Mendiburu, Alexander
    Miguel-Alonso, Jose
    COMPUTERS & SECURITY, 2023, 124