论文标题
手术刀：Python静态分析框架
Scalpel: The Python Static Analysis Framework
论文作者
论文摘要
尽管是最受欢迎的编程语言，但Python尚未受到社区的足够关注。据我们所知，没有提出一般静态分析框架来促进专用Python静态分析仪的实施。为了填补这一空白，我们设计和实施了这样的框架（命名为手术刀），并将其作为开源项目公开使用。手术刀框架已经集成了许多基本的静态分析功能（例如，呼叫图形构造，控制流图构造，别名分析等），这些功能已准备好被开发人员重复使用，以实现针对统计上解决专用的Python问题的客户应用程序，例如检测错误或固定漏洞性。
Despite being the most popular programming language, Python has not yet received enough attention from the community. To the best of our knowledge, there is no general static analysis framework proposed to facilitate the implementation of dedicated Python static analyzers. To fill this gap, we design and implement such a framework (named Scalpel) and make it publicly available as an open-source project. The Scalpel framework has already integrated a number of fundamental static analysis functions (e.g., call graph constructions, control-flow graph constructions, alias analysis, etc.) that are ready to be reused by developers to implement client applications focusing on statically resolving dedicated Python problems such as detecting bugs or fixing vulnerabilities.
