SWAN: A Static Analysis Framework for Swift

被引:6
作者
Tiganov, Daniil [1 ]
Cho, Jeff [1 ]
Ali, Karim [1 ]
Dolby, Julian [2 ]
机构
[1] Univ Alberta, Edmonton, AB, Canada
[2] IBM Res, Yorktown Hts, NY USA
来源
PROCEEDINGS OF THE 28TH ACM JOINT MEETING ON EUROPEAN SOFTWARE ENGINEERING CONFERENCE AND SYMPOSIUM ON THE FOUNDATIONS OF SOFTWARE ENGINEERING (ESEC/FSE '20) | 2020年
基金
加拿大自然科学与工程研究理事会;
关键词
Swift; static analysis; taint analysis;
D O I
10.1145/3368089.3417924
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Swift is an open-source programming language and Apple's recommended choice for app development. Given the global widespread use of Apple devices, the ability to analyze Swift programs has significant impact on millions of users. Although static analysis frameworks exist for various computing platforms, there is a lack of comparable tools for Swift. While LLVM and Clang support some analyses for Swift, they are either primarily dynamic analyses or not suitable for deeper analyses of Swift programs such as taint tracking. Moreover, other existing tools for Swift only help enforce code styles and best practices. In this paper, we present SWAN, an open-source framework that allows robust program analyses of Swift programs using IBM's T.J. Watson Libraries for Analysis (WALA). To provide a wide range of analyses for Swift, SWAN leverages the well-established libraries in WALA. SWAN is publicly available at https://github.com/themaplelab/swan. We have also made a screencast available at https//youtu.be/AZwfhOGqwFs.
引用
收藏
页码:1640 / 1644
页数:5
相关论文
共 50 条
  • [41] Non-polynomial framework for static analysis of functionally graded carbon nano-tube reinforced plates
    Soni, Aakash
    Grover, Neeraj
    Bhardwaj, Gagandeep
    Singh, B. N.
    COMPOSITE STRUCTURES, 2020, 233 (233)
  • [42] Static analysis framework for permission-based dataset generation and android malware detection using machine learning
    Pathak, Amarjyoti
    Kumar, Th. Shanta
    Barman, Utpal
    EURASIP JOURNAL ON INFORMATION SECURITY, 2024, 2024 (01):
  • [43] Meizodon: Security Benchmarking Framework for Static Android Malware Detectors
    Rodriguez, Sebastiaan Alvarez
    van der Kouwe, Erik
    THIRD CENTRAL EUROPEAN CYBERSECURITY CONFERENCE (CECC 2019), 2019,
  • [44] Are a Static Analysis Tool Study's Findings Static? A Replication
    Liu, David
    Calver, Jonathan
    Craig, Michelle
    PROCEEDINGS OF THE 2024 CONFERENCE INNOVATION AND TECHNOLOGY IN COMPUTER SCIENCE EDUCATION, VOL 1, ITICSE 2024, 2024, : 80 - 86
  • [45] STATIC ANALYSIS OF POSTSCRIPT CODE
    HORSPOOL, RN
    VITEK, J
    COMPUTER LANGUAGES, 1993, 19 (02): : 65 - 78
  • [46] Heap Abstractions for Static Analysis
    Kanvar, Vini
    Khedker, Uday P.
    ACM COMPUTING SURVEYS, 2016, 49 (02)
  • [47] The Compiler as a Static Analysis Tool
    Dewar, Robert B. K.
    SIGADA'07: PROCEEDINGS OF THE 2007 ACM SIGADA ANNUAL INTERNATIONAL CONFERENCE, 2007, : 83 - 87
  • [48] Static analysis for syntax objects
    Fisher, David
    Shivers, Olin
    ACM SIGPLAN NOTICES, 2006, 41 (09) : 111 - 121
  • [49] Static Analysis of ROP Code
    D'Elia, Daniele Cono
    Coppa, Emilio
    Salvati, Andrea
    Demetrescu, Camil
    PROCEEDINGS OF THE 12TH EUROPEAN WORKSHOP ON SYSTEMS SECURITY (EUROSEC 2019), 2019,
  • [50] Datalog Static Analysis in Secrecy
    Kouhounestani, Mojgan
    Lee, Woosuk
    IEEE ACCESS, 2022, 10 : 56179 - 56192