Static analysis with input reduction

Patent metadata

Field	Value
Publication number	US-10157049-B2
Application number	US-201113281653-A
Country	US
Kind code	B2
Filing date	Oct 26, 2011
Priority date	Oct 26, 2011
Publication date	Dec 18, 2018
Grant date	Dec 18, 2018

Abstract

Statically analyzing a computer software application can include identifying a plurality of objects within the instructions of a computer software application, where the objects in the plurality of objects are of the same object type, and preparing a modified version of the instructions in which any of the objects in the plurality of objects determined to be extraneous is omitted.

First claim

What is claimed is:

1. A computer-implemented method for statically analyzing a computer software application, comprising:
evaluating, by an object identifier module, a static analysis specification that indicates a static analysis type to be performed and a particular object type previously-identified to be extraneous based upon the static analysis type to determine the static analysis type and the particular object type,
identifying, by an object identifier module, within the computer software application a plurality of objects of the particular object type previously-identified to be extraneous to a static analysis of the static analysis type to be performed;

preparing, by an input reducer module, a modified version of the computer software application in which the plurality of objects are omitted from the computer software application; constructing a model representation of the modified version of the computer software application;
and performing, by the static analysis engine, the static analysis on the model representation of the modified version of the computer software application.

2. The method of claim 1 , wherein the type of the static analysis is a static security analysis.

3. The method of claim 1 , wherein the plurality of objects of the particular object type are identified based upon a comparison with predefined object equivalence characteristics.

4. The method of claim 3 , wherein the comparison determines equivalence based upon objects defining a same set of attributes.

5. The method of claim 3 , wherein the comparison determines equivalence based upon objects having same JavaScript attributes values.

6. The method of claim 3 , wherein the comparison determines equivalence based upon objects having same XPath to a root node in a document object model.

7. A computer hardware system configured for statically analyzing a computer software application, comprising:
a hardware processor configured to initiate the following executable operations:
evaluating, by an object identifier module, a static analysis specification that indicates a static analysis type to be performed and a particular object type previously-identified to be extraneous based upon the static analysis type to determine the static analysis type and the particular object type,
identifying, by an object identifier module, within the computer software application a plurality of objects of the particular object type previously-identified to be extraneous to a static analysis of the static analysis type to be performed;
preparing, by an input reducer module, a modified version of the computer software application in which the plurality of objects are omitted from the computer software application; constructing a model representation of the modified version of the computer software application;
and performing, by the static analysis engine, the static analysis on the model representation of the modified version of the computer software application.

8. The system of claim 7 , wherein the type of the static analysis is a static security analysis.

9. The system of claim 7 , wherein the plurality of objects of the particular object type are identified based upon a comparison with predefined object equivalence characteristics.

10. The system of claim 9 , wherein the comparison determines equivalence based upon objects defining a same set of attributes.

11. The system of claim 9 , wherein the comparison determines equivalence based upon objects having same JavaScript attributes values.

12. The system of claim 9 , wherein the comparison determines equivalence based upon objects having same XPath to a root node in a document object model.

13. A computer program product, comprising:
a hardware storage device having program code stored thereon, the program code, which when executed by a computer hardware system configured for statically analyzing a computer software application, causes the computer hardware system to perform:
evaluating, by an object identifier module, a static analysis specification that indicates a static analysis type to be performed and a particular object type previously-identified to be extraneous based upon the static analysis type to determine the static analysis type and the particular object type,
identifying, by an object identifier module, within the computer software application a plurality of objects of the particular object type previously-identified to be extraneous to a static analysis to be performed;
preparing, by an input reducer module, a modified version of the computer software application in which the plurality of objects are omitted from the computer software application;
constructing a model representation of the modified version of the computer software application; and
performing, by the static analysis engine, the static analysis on the model representation of the modified version of the computer software application.

14. The computer program product of claim 13 , wherein the type of the static analysis is a static security analysis.

15. The computer program product of claim 13 , wherein the plurality of objects of the particular object type are identified based upon a comparison with predefined object equivalence characteristics.

16. The computer program product of claim 15 , wherein the comparison determines equivalence based upon objects defining a same set of attributes.

17. The computer program product of claim 15 , wherein the comparison determines equivalence based upon objects having same JavaScript attributes values.

18. The computer program product of claim 15 , wherein the comparison determines equivalence based upon objects having same XPath to a root node in a document object model.

Assignees

• Haviv Yinnon A
• Kalman Daniel
• Pikus Dmitri
• Tripp Omer
• Weisman Omri
• IBM

Inventors

• Haviv Yinnon A
• Kalman Daniel
• Pikus Dmitri
• Tripp Omer
• Weisman Omri

Classifications

• G06F8/443 Primary

  Optimisation · CPC title

• G06F8/75

  Structural analysis for program understanding · CPC title

• G06F11/3604

  Analysis of software for verifying properties of programs (testing of software G06F11/3668) · CPC title