Continuous Flow Analysis to Detect Security Problems

Understand

We introduce a tool that supports continuous flow analysis in order to detect security problems as the user edits.

• The tool uses abstract interpretation over both byte codes and abstract syntax trees to trace the flow of both type annotations and system states from their sources to security problems.
• The flow analysis achieves a balance between performance and accuracy in order to detect security vulnerabilities within seconds, and uses incremental update to provide immediate feedback to the programmer.
• Resource files are used to specify the specific security constraints of an application and to tune the analysis.