What's Still Missing in Static Analysis? A Decade-Long Journey.
The field of static analysis has made enormous progress over the past few decades. Static analysis tools are now routinely used to improve software quality in industry. Static analysis frameworks like CodeQL have helped discover hundreds of security vulnerabilities and seek to democratize the technology by enabling developers to write custom queries. Despite these advances, static analysis faces challenges that greatly limit its effectiveness and accessibility in practice. In this talk, I will show how ideas from machine learning can help alleviate them, most notably in inferring specifications. I will cover a wide range of approaches that trace the arc of the field of machine learning itself, starting from probabilistic graphical models like Markov Logic Networks and Bayesian Networks, to deep learning models like Graph Neural Networks and Transformers, and ultimately modern approaches involving Large Language Models and compound AI systems including neurosymbolic and agent frameworks.
Tue 22 OctDisplayed time zone: Pacific Time (US & Canada) change
09:00 - 10:30 | Automatising Program AnalysisSAS at San Gabriel Chair(s): Manuel Hermenegildo Technical University of Madrid (UPM) and IMDEA Software Institute | ||
09:00 60mKeynote | What's Still Missing in Static Analysis? A Decade-Long Journey. SAS Mayur Naik University of Pennsylvania | ||
10:00 30mFull-paper | Synthesizing Abstract Transformers for Reduced-Product Domains SAS Pankaj Kumar Kalita IIT Kanpur, Thomas Reps University of Wisconsin-Madison, Subhajit Roy IIT Kanpur Pre-print |