SOAP 2020
who it's for
program analysis researchers, static analysis engineers, security engineers, tool developers, compiler engineers, ide and editor plugin developers, software architects
topics
diff-based CI analysis; race detection in production; trace witnesses for bug provenance; constant copy machine; Takai abstract-interpretation IR; value-sensitive Python analysis; abstract garbage collection for analyzers; Soufflé Datalog engine; DOOP Java/Android Datalog; KLEE symbolic execution engine; Tricorder code-review platform; MagpieBridge LSP bridge
| title | author | length |
|---|---|---|
| SOAP - Keynote: Formal Reasoning and the Hacker Way | Peter W. O'Hearn | 01h 00m |
A compositional static analyzer called Infer is wired into CI to run on diffs rather than nightly batches, and this deployment change raises developer fix rate… | ||
| Explaining Bug Provenance with Trace Witnesses | Xi Wu | 25m |
Proposes a decidable analysis that maps programs into a simplified machine called the constant copy machine and constructs tree witness traces that explain how… | ||
| TACAI: An Intermediate Representation based on Abstract Interpretation | Christoph Reichenbach | 23m |
An OPAL extension builds an abstract‑interpretation IR called Takai with three configurable domains (L0, L1, L2) and produces SSA‑like code; computing Takai… | ||
| Value and Allocation Sensitivities in Static Python Analyses | Raphael Mona | 26m |
Experimental evaluation compares type-only and value-sensitive Python analyses on real benchmarks, finding the same number of type-related exception detections… | ||
| Tool Talk: Soufflé | Bernhard Scholz | 15m |
Soufflé is a Datalog engine that targets C++-level performance by generating standalone C++ via a compiled synthesizer or running an interpreter for quick… | ||
| Tool Talk: DOOP | Yannis Smaragdakis | 17m |
DOOP is a declarative Java/Android bytecode analysis framework that expresses pointer and value‑flow algorithms as ~2,000 Datalog rules compiled to a Souffle… | ||
| Tool Talk: CodeChecker | gabor martin, daniel kopp | 14m |
Open-source CodeChecker drives Clang-based analyzers, stores results in a database and serves a web UI; it adds cross-translation unit analysis and clearer… | ||
| Tool Talk: KLEE | martin klies | 12m |
KLEE is an open source dynamic symbolic execution engine that runs on LLVM bitcode for C/C++ and claims concrete-test generation that actually triggers bugs… | ||
| SOAP - Keynote: Beyond Code: New Signals for Static Analysis | Caitlyn sidarsky | 01h 03m |
Google builds Tricorder, a microservice static-analysis platform that runs on code review and scales to analyze more than 50,000 reviews daily, with 200+… | ||
| Tool Talk: Soot and Phasar | Eric Baden, Dominic Schubert, Philip Dominic Schubert | 32m |
Soot is a 1999 Java/Android analysis and transformation framework with 1300 citations and ~1,400 GitHub stars; it integrates FlowDroid, Boomerang and several… | ||
| Tool Talk: MagpieBridge | Linghui Luo | 16m |
MagpieBridge implements a reusable magpie server that turns program-analysis outputs into LSP/JSON messages and wires them to editors, with two analysis APIs… | ||
| Tool Talk: WALA | Christoph Reichenbach | 16m |
WALA is a cross-language analysis pipeline that converts per-language ASTs into a common CAST -> IR -> SDG and builds call graphs so a single graph engine can… | ||
| International Workshop on the State Of the Art in Program Analysis (SOAP) | Christoph Reichenbach, paddy krishnan | 07h 15m |
Workshop runs experiments and tools rather than sweeping theory: expect concrete numbers, deployments and what actually worked. Highlights: diff-time… | ||
| nothing matches | ||