Combined static and dynamic analysis for inferring program dependencies using a pattern language

ABSTRACT

One of the challenges when examining enterprise applications is the ability to understand the dependencies of these applications on external and internal resources such as database access or transaction activation. Inferring dependencies can be achieved using a static approach, a dynamic one or a combination of the two. Static analysis tools detect dependencies based on code investigation while dynamic tools detect dependencies based on runtime execution. The combination of these two approaches is essential for a complete and precise analysis. In this paper we present and illustrate a technique for inferring application dependencies on resources. The technique is based on a combined dynamic and static analysis. A pattern language is defined to enable the specification of dependencies as sequences of method invocations in the application code. Specifically, the sequences are patterns that constitute access to resources, e.g. databases, message queues, and control systems. We propose an algorithm for inferring application dependencies based on hybrid dynamic and static analysis that propagates information provided by dynamic analysis into the static analysis and back to the dynamic analysis. Empirical results from our implemented prototype are presented.

REFERENCES

• 1: Rajeev Alur , Pavol Černý , P. Madhusudan , Wonhong Nam, Synthesis of interface specifications for Java classes, ACM SIGPLAN Notices, v.40 n.1, p.98-109, January 2005
• 2: L. O. Andersen. Program Analysis and Specialization for the C Programming Language. PhD thesis, DIKU, Univ. of Copenhagen, May 1994.
• 3: Rastisalv Bodík , Sadun Anik, Path-sensitive value-flow analysis, Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, p.237-251, January 19-21, 1998, San Diego, California, United States [doi>10.1145/268946.268966]
• 4: David Callahan , Keith D. Cooper , Ken Kennedy , Linda Torczon, Interprocedural constant propagation, Proceedings of the 1986 SIGPLAN symposium on Compiler construction, p.152-161, June 25-27, 1986, Palo Alto, California, United States
• 5: CAST. CAST Application Intelligence Platform. 'http://www.castsoftware.com/".
• 6: Nurit Dor , Stephen Adams , Manuvir Das , Zhe Yang, Software validation via scalable path-sensitive value flow analysis, Proceedings of the 2004 ACM SIGSOFT international symposium on Software testing and analysis, July 11-14, 2004, Boston, Massachusetts, USA
• 7: Eclipse Foundation. The Eclipse Test and Performance Tools Platform. "http://www.eclipse.org/tptp/".
• 8: Aiding Program Comprehension by Static and Dynamic Feature Analysis, Proceedings of the IEEE International Conference on Software Maintenance (ICSM'01), p.602, November 07-09, 2001
• 9: David Eng, Combining static and dynamic data in code visualization, Proceedings of the 2002 ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering, November 18-19, 2002, Charleston, South Carolina, USA
• 10: M. Ernst. Static and dynamic analysis: synergy and duality. In Workshop on Dynamic Analysis (WODA), 2003.
• 11: Jeanne Ferrante , Karl J. Ottenstein , Joe D. Warren, The program dependence graph and its use in optimization, ACM Transactions on Programming Languages and Systems (TOPLAS), v.9 n.3, p.319-349, July 1987 [doi>10.1145/24039.24041]
• 12: Stephen Fink , Eran Yahav , Nurit Dor , G. Ramalingam , Emmanuel Geay, Effective typestate verification in the presence of aliasing, Proceedings of the 2006 international symposium on Software testing and analysis, July 17-20, 2006, Portland, Maine, USA [doi>10.1145/1146238.1146254]
• 13: HAL Knowledge Solutions. HAL. "http://www.halks.com/".
• 14: D. Heuzeroth, S. Mandel, and W. Löwe. Generating design pattern detectors from pattern specifications. In Int. Conf. on Automated Softw. Eng., pages 245--248, 2003.
• 15: IBM Software. IBM CICS Interdependency Analyzer. "http://www-306.ibm.com/software/htp/cics/ianaly/".
• 16: IBM Software. IBM Tivoli Monitoring for Transaction Performance. "http://www-306.ibm.com/software/tivoli/products/monitortransaction/"
• 17: IBM Software. Websphere Studio Application Monitor. "http://www-306.ibm.com/software/awdtools/studioapplicationmonitor/".
• 18: IBM Software. Websphere Studio Asset Analyzer. "http://www-306.ibm.com/software/awdtools/wsaa/".
• 19: IBM Watson Research Center. DOMO. "http://www.research.ibm.com/patrans/".
• 20: Daniel Jackson , Eugene J. Rollins, A new model of program dependences for reverse engineering, Proceedings of the 2nd ACM SIGSOFT symposium on Foundations of software engineering, p.2-10, December 06-09, 1994, New Orleans, Louisiana, United States
• 21: William Landi , Barbara G. Ryder, Pointer-induced aliasing: a problem taxonomy, Proceedings of the 18th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, p.93-103, January 21-23, 1991, Orlando, Florida, United States [doi>10.1145/99583.99599]
• 22: Mercury. Mercury Application Mapping. "http://www.mercury.com/us/products/businessavailability-center/application mapping/".
• 23: George C. Necula , Scott McPeak , Westley Weimer, CCured: type-safe retrofitting of legacy code, Proceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, p.128-139, January 16-18, 2002, Portland, Oregon
• 24: Martin P. Robillard, Automatic generation of suggestions for program investigation, Proceedings of the 10th European software engineering conference held jointly with 13th ACM SIGSOFT international symposium on Foundations of software engineering, September 05-09, 2005, Lisbon, Portugal
• 25: R. E. Strom , D. M. Yellin, Extending Typestate Checking Using Conditional Liveness Analysis, IEEE Transactions on Software Engineering, v.19 n.5, p.478-485, May 1993 [doi>10.1109/32.232013]
• 26: R E Strom , S Yemini, Typestate: A programming language concept for enhancing software reliability, IEEE Transactions on Software Engineering, v.12 n.1, p.157-171, Jan. 1986
• 27: SUN Microsystems. Java Pet Store. http://java.sun.com/developer/releases/petstore/".
• 28: L. Wendehals. Improving design pattern instance recognition by dynamic analysis. In ICSE Workshop on Dynamic Analysis (WODA), pages 29--33, 2003.
• 29: John Whaley , Michael C. Martin , Monica S. Lam, Automatic extraction of object-oriented component interfaces, Proceedings of the 2002 ACM SIGSOFT international symposium on Software testing and analysis, July 22-24, 2002, Roma, Italy

INDEX TERMS

Primary Classification:
  F. Theory of Computation
  F.3 LOGICS AND MEANINGS OF PROGRAMS
      F.3.2 Semantics of Programming Languages
          Subjects: Program analysis

Additional Classification:
  D. Software
  D.2 SOFTWARE ENGINEERING
      D.2.5 Testing and Debugging
      D.2.8 Metrics
          Subjects: Complexity measures
  D.4 OPERATING SYSTEMS
      D.4.8 Performance
          Subjects: Operational analysis