String analysis for Java and Android applications

摘要: String analysis is critical for many verification techniques. However, accurately modeling string variables a challeng- ing problem. Current approaches are generally customized certain problem domains or have limitations in handling loops, providing context-sensitive inter-procedural analysis, and performing efficient on complicated apps. To address these limitations, we propose general framework, Violist, that allows researchers to more flexibly choose how they will each of challenges by separating the representation interpreta- tion operations. In our evaluation, show approach can achieve high accuracy both Java Android apps reasonable amount time. We also com- pared with popular widely used analyzer found has higher precision shorter execution time while maintaining same level recall.