Skip to content

Commit

Permalink
Updated read me file
Browse files Browse the repository at this point in the history
  • Loading branch information
joannacss committed Aug 1, 2021
1 parent bd75a3e commit d0310f1
Showing 1 changed file with 21 additions and 0 deletions.
21 changes: 21 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,3 +21,24 @@ To evaluate it, we performed the following:



## Related Publications

```
@inproceedings{santos2020salsa,
author = {Santos, Joanna C. S. and Jones, Reese A. and Mirakhorli, Mehdi},
title = {Salsa: Static Analysis of Serialization Features},
year = {2020},
isbn = {9781450381864},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://doi.org/10.1145/3427761.3428343},
doi = {10.1145/3427761.3428343},
abstract = {Static analysis has the advantage of reasoning over multiple possible paths. Thus, it has been widely used for verification of program properties. Property verification often requires inter-procedural analysis, in which control and data flow are tracked across methods. At the core of inter-procedural analyses is the call graph, which establishes relationships between caller and callee methods. However, it is challenging to perform static analysis and compute the call graph of programs with dynamic features. Dynamic features are widely used in software systems; not supporting them makes it difficult to reason over properties related to these features. Although state-of-the-art research had explored certain types of dynamic features, such as reflection and RMI-based programs, serialization-related features are still not very well supported, as demonstrated in a recent empirical study. Therefore, in this paper, we introduce Salsa (Static AnaLyzer for SeriAlization features), which aims to enhance existing points-to analysis with respect to serialization-related features. The goal is to enhance the resulting call graph's soundness, while not greatly affecting its precision. In this paper, we report our early effort in developing Salsa and its early evaluation using the Java Call Graph Test Suite (JCG).},
booktitle = {Proceedings of the 22nd ACM SIGPLAN International Workshop on Formal Techniques for Java-Like Programs},
pages = {18–25},
numpages = {8},
keywords = {Java deserialization, Static analysis, Call graphs, Object marshaling and unmarshalling, Java serialization},
location = {Virtual, USA},
series = {FTfJP 2020}
}
```

0 comments on commit d0310f1

Please sign in to comment.