Center for Advanced Software Analysis is an umbrella for a series of research projects related to program analysis and web technologies - LAWP, TRIA, and SADL - located at Department of Computer Science, Aarhus University.
The center is supported by grants (totalling 2.2 M euros) from the Danish Research Council for Technology and Production Sciences and the Danish Council for Independent Research. The research activities are additionally financially supported by IBM Research and Google.
TRIA - Tools for Rich Internet Applications
The TRIA research project aims to develop formal languages for specifying essential requirements and assumptions together with program analysis tools for verifying consistency between the components, in collaboration with the software company Trifork.
SADL - Static Analysis for Dynamic Languages
Software developers increasingly choose dynamic programming languages despite their well-known drawbacks compared to languages that are statically typed. The flexibility of dynamic languages often makes them more suitable for rapid development of small and medium-sized software applications, whereas statically typed languages permit static type checking that catches many programming errors early in development where they are cheap to correct.
The SADL project aims to lead the way in unifying the two kinds of programming languages by means of static analysis and thereby give the programmers the best from both worlds.
LAWP - Languages and Analyses for Web Programming (2008-2012)
Errors in programs are a well-known problem, both to programmers and users. Modern Web-based software systems are being built from components that in complicated ways communicate with each other and the users. With the increasing prevalence and complexity of the Web, the consequences of programming errors are becoming problematic.
The LAWP research project aims to develop high-level languages and static analysis techniques for XML transformations and server-based web applications, in order to prevent programming errors.
- TSCheck - finding bugs in TypeScript declaration files
- ServletValidator - program analysis for Servlets
- XACT - type-safe XML transformations
- JWIG - high-level Web programming
- JSA - string analysis for Java
- Determinacy in Static Analysis of jQuery, Andreasen and Møller, OOPSLA 2014
- Sparse Dataflow Analysis with Pointers and Reachability, Madsen and Møller, SAS 2014
- Automated Detection of Client-State Manipulation Vulnerabilities, Møller and Schwarz, to appear in ACM TOSEM, earlier version in ICSE 2012 (ACM SIGSOFT Distinguished Paper)
- Automated Testing with Targeted Event Sequence Generation, Jensen, Prasad, and Møller, ISSTA 2013
- Remedying the Eval that Men Do, Jensen, Jonsson, and Møller, ISSTA 2012 (ACM SIGSOFT Distinguished Paper)
- HTML Validation of Context-Free Languages, Møller and Schwarz, FoSSaCS 2011
- XML Graphs in Program Analysis, Møller and Schwartzbach, Science of Computer Programming, 76(6)
- Interprocedural Analysis with Lazy Propagation, Jensen, Møller, and Thiemann, SAS 2010
How to apply
If you are interested in joining CASA as a postdoc, assistant professor, or PhD student, please contact Associate Professor Anders Møller (email@example.com) and supply a CV and a short description of your experience with program analysis, web technologies, and scripting languages.