Skip to content

About FluentTQL DSL

Jump to bottom
Goran Piskachev edited this page Sep 8, 2020 · 1 revision

FluentTQL is a domain-specific language with Java as the host language. The main purpose of the fluentTQL is to facilitate the developers to specify the taint flows, and these fluentTQL specifications are used in the analysis to analyze the program for the presence of the specified taint flows in the specifications.

How does it work?

  1. The developer can specify the taint flows using the fluentTQL DSL.
  2. Later, these specifications are used by the FluentTQL-MagpieBridge and give these specifications to the taint analysis based on soot.
  3. This analysis analyzes the project for the presence of the taint flows and reports it in the IDE. Users can configure the analysis using the SecuCheck configuration page.
Clone this wiki locally