DSD-Crasher: A hybrid analysis tool for bug finding

Download: PDF.

“DSD-Crasher: A hybrid analysis tool for bug finding” by Christoph Csallner, Yannis Smaragdakis, and Tao Xie. ACM Transactions on Software Engineering and Methodology, vol. 17, no. 2, Apr. 2008, pp. 8:1-8:37.
A previous version appeared as “DSD-Crasher: A hybrid analysis tool for bug finding” by Christoph Csallner and Yannis Smaragdakis. In ISSTA 2006, Proceedings of the 2006 International Symposium on Software Testing and Analysis, (Portland, ME, USA), July 2006, pp. 245-254.

Abstract

DSD-Crasher is a bug finding tool that follows a three-step approach to program analysis:

D. Capture the program's intended execution behavior with dynamic invariant detection. The derived invariants exclude many unwanted values from the program's input domain.

S. Statically analyze the program within the restricted input domain to explore many paths.

D. Automatically generate test cases that focus on reproducing the predictions of the static analysis. Thereby confirmed results are feasible.

This three-step approach yields benefits compared to past two-step combinations in the literature. In our evaluation with third-party applications, we demonstrate higher precision over tools that lack a dynamic step and higher efficiency over tools that lack a static step.

Download: PDF.

BibTeX entry:

@article{CsallnerSX2008,
   author = {Christoph Csallner and Yannis Smaragdakis and Tao Xie},
   title = {{DSD-Crasher}: A hybrid analysis tool for bug finding},
   journal = {ACM Transactions on Software Engineering and Methodology},
   volume = {17},
   number = {2},
   pages = {8:1--8:37},
   month = apr,
   year = {2008}
}

Back to Publications whose methodology uses invariant detection.