Sound Static Analysis for Microservices: Utopia? A preliminary experience with LiSA
Sound static analysis allows one to overapproximate all possible program executions to infer various properties. However, it requires quite some effort to formalize and prove the soundness of program semantics. Most software applications developed nowadays are distributed systems in which different [micro]services communicate through synchronous and asynchronous mechanisms. These applications are composed of programs developed in many programming languages and rely on many technologies. However, sound static analysis might be particularly promising in distributed architectures, where exhaustively (or even partially) testing such systems is often prohibitive. This paper presents our ongoing work on applying LiSA (Library for Static Analysis) to microservices. So far, our effort has focused on one programming language (Python), a few libraries (ROS2, pika, FastAPI, Django), and the architectural reconstruction of distributed applications. However, it already shows some promising results and general patterns that might be followed to develop such analyses.
Fri 20 SepDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
13:30 - 15:00 | |||
13:30 30mTalk | Sound Static Analysis for Microservices: Utopia? A preliminary experience with LiSA FTfJP Giacomo Zanatta Ca’ Foscari University of Venice, Pietro Ferrara Università Ca' Foscari, Venezia, Italy, Teodors Lisovenko Ca' Foscari University of Venice, Luca Negrini Ca’ Foscari University of Venice, Gianluca Caiazza Ca' Foscari University of Venice, Ruffin White White Robotics | ||
14:00 30mTalk | Towards a Sound Construction of EVM Bytecode Control-flow Graphs FTfJP Vincenzo Arceri University of Parma, Italy, Saverio Mattia Merenda University of Parma, Italy, Greta Dolcetti Ca' Foscari University of Venice - Department of Environmental Sciences, Informatics and Statistics, Luca Negrini Ca’ Foscari University of Venice, Luca Olivieri University Ca' Foscari, Venice, Enea Zaffanella University of Parma, Italy | ||
14:30 30mTalk | Abstract Interpretation of Java Bytecode in Sturdy FTfJP |