Statik kod analizinin uygulama çalışma izlerinin analiziyle elde edilen uygulama spesifik kurallarla genişletilmesi

Static code analysis tools can generate alerts regarding only generic issues such as uninitialized variables. They cannot detect violations of application-speci c rules. Tools can be extended with specialized checkers that implement the veri cation of these rules. However, such rules are usually not documented explicitly. Moreover, the implementation of specialized checkers is a manual process that requires expertise. In this thesis, we present a novel approach to provide these extensions automatically. In our approach, application-speci c programming rules are automatically extracted from execution traces collected at runtime. These traces are analyzed o ine to identify programming rules, of which violation lead to errors. Then, specialized checkers for these rules are introduced as extensions to a static analysis tool so that their violations can be checked throughout the source code. We evaluated our approach with two industrial case studies from the telecommunications domain. We were able to detect real faults with checkers that were automatically generated based on the analysis of execution logs.