📋 Tender Overview
Self-Optimizing Static Program Analysis
Software Systems Pervade Our Personal And Professional Lives, Yet Their Insecurity Threaten Our Society. To Assure That Software Systems Are Dependable And Secure, One Must Reason About Their Code. Static Program Analysis Enables Such Reasoning. It Can Be Applied To Individual Software Components, And It Can Show Not Only The Presence But Also Prove The Absence Of Bugs And Vulnerabilities. Yet, To Be Useful To Software Developers, Static Analyses Must Be Adapted To The Context In Which They Are Used. Studies Show That Poorly Adapted Analyses Slow Down Rather Than Assist Development. They Report Large Sets Of False Warnings That Distract Developers From Actual Bugs, Which The Analyses Often Miss. They Often Run So Long That Results Are Reported When They Are Already Outdated. Sosa’S Main Research Hypothesis Is That One Can Generate Precise And Efficient Static Analyses Of Software Systems By Making Static Analysis Self-Aware And Self-Optimizing. With Sosa, A Static Analysis Conducts Analyses And Optimizations Not Just Of Programs But Of Itself. This Is A Groundbreaking Paradigm Shift: No Previous Research Has Regarded Complex Program Analyses Themselves As The Primary Object Of Automated Analysis And Optimization. Sosa Will Introduce, For The First Time, Static Analyses Whose Execution Is Not Pre-Defined By Their Creators But Is Inherently Self-Adaptive. In Result, Analyses Automatically Adapt Themselves To Yield A Performance/Precision Tradeoff That Is Optimal With Respect To How The Analysis Is Deployed And Which Program It Analyzes. With Sosa, Static Analyses Will Report True And Relevant Warnings At Minimal Analysis Time Without Requiring Manual Optimizations By End Users. Sosa Will Boost Progress In The Field Of Program-Analysis Research, Mapping The Landscape Of Static-Analysis Optimizations And How And Where They Are Best Applied. By Enabling Software Developers To Optimally Deploy Static Analyses With Ease, Sosa Will Help Secure Millions Of Software Systems.
Funded Under
European Research Council (Erc)
Total Cost
€ 2 500 000,00
Eu Contribution
€ 2 500 000,00
Coordinated By
Universitaet Paderborn
Germany
Start Date
1 November 2024
End Date
31 October 2029
Objective
Software systems pervade our personal and professional lives, yet their insecurity threaten our society. To assure that software systems are dependable and secure, one must reason about their code. Static program analysis enables such reasoning. It can be applied to individual software components, and it can show not only the presence but also prove the absence of bugs and vulnerabilities. Yet, to be useful to software developers, static analyses must be adapted to the context in which they are used. Studies show that poorly adapted analyses slow down rather than assist development. They report large sets of false warnings that distract developers from actual bugs, which the analyses often miss. They often run so long th
