[Review] How Good Are the Specs? A Study of the Bug-Finding Effectiveness of Existing Java API Specifications
The paper is a evaluation, which assesses the current runtime verification technology, and mainly the effectiveness of the existing API specifications.
Three conclusions:
- Current RV technology has matured enough with tolerable runtime overhead.
- Existing API specification can find many bugs that developers are willing to fix.
- The false alarm rates are quite high due to the ineffective specifications.
![[Review] How Good Are the Specs? A Study of the Bug-Finding Effectiveness of Existing Java API Specifications](/blog/images/35/cover.png)
![[Review] Assisting Static Analysis with Large Language Models: A ChatGPT Experiment](/blog/images/42/cover.png)
![[Review] Detecting Missed Security Operations Through Differential Checking of Object-based Similar Paths](/blog/images/41/cover.png)
![[Review] GPTScan: Detecting Logic Vulnerabilities in Smart Contracts by Combining GPT with Program Analysis](/blog/images/40/cover.png)
![[Review] MoonShine: Optimizing OS Fuzzer Seed Selection with Trace Distillation](/blog/images/39/cover.png)
![[Review] One Simple API Can Cause Hundreds of Bugs: An Analysis of Refcounting Bugs in All Modern Linux Kernels](/blog/images/38/cover.png)