Runtime Analyzer Infrastructure Rule Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Static analysis tools often produce false positives or false negatives due to simulated execution paths differing from actual execution paths, and manual analysis of third-party libraries is labor-intensive and error-prone, especially for less popular libraries.
Innovation Solution
A system that uses a runtime analyzer to monitor function behavior and generate infrastructure rules by tracking probe arguments and their modifications, allowing for the creation of pass-through and source rules that can be used in static analysis without program code availability, thereby minimizing false results.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static analysis tools simulate code execution paths, then coding errors and vulnerabilities can be identified, but false positives and false negatives occur due to differences between simulated and actual execution paths
Solution Approach 1:
The patent applies preliminary action by performing runtime analysis before static analysis to establish accurate infrastructure rules. The system executes the program at runtime to observe actual execution paths and data flows, then uses this observed information to create infrastructure rules that guide subsequent static analysis, eliminating the need to simulate execution paths from scratch and reducing false positives and negatives.
Solution Approach 2:
The system implements feedback by using runtime analysis results to continuously improve static analysis accuracy. The infrastructure rules generated from runtime observations are fed back into the static analysis tool, creating a closed-loop system where actual execution data refines the static analysis model, progressively reducing false positives and false negatives over time.
2Measurement precision
If manual analysis is performed on third-party libraries, then accurate infrastructure rules can be created, but extensive effort and potential errors occur especially for less popular libraries
Solution Approach 1:
The patent applies self-service by enabling the system to automatically generate infrastructure rules for third-party libraries through runtime analysis, without requiring manual analysis. The runtime analyzer automatically executes the program with the libraries, observes actual data flows and execution paths, and generates accurate infrastructure rules autonomously, eliminating the time-consuming manual analysis process while maintaining high accuracy.
Solution Approach 2:
The system replaces the mechanical manual analysis process with an automated runtime analysis mechanism. Instead of manually examining and documenting library behaviors, the system uses automated runtime execution and observation to extract infrastructure rules, substituting human effort with an automated computational process that is both faster and more consistent.
3Adaptability or versatility
If static analysis is performed without program code availability, then analysis can still be conducted, but results may be less accurate without detailed code inspection
Solution Approach 1:
The patent applies copying by creating a behavioral model of the program through runtime analysis. Instead of requiring direct access to source code, the system executes the program and copies its execution behavior into infrastructure rules that represent the actual data flows and control structures. This behavioral copy enables accurate static analysis even when original code is unavailable, maintaining reliability by basing analysis on observed actual behavior rather than assumptions.
Data Source
AI summary
In one implementation, a system can comprise a probe monitor engine to monitor a probe passed to a function of a set of instructions, a propagation engine to identify an infrastructure connection based on an attribute of the probe during a runtime session, and a rule engine to generate an infrastructure rule based on the infrastructure connection and the attribute of the probe.