{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,23]],"date-time":"2026-06-23T16:41:42Z","timestamp":1782232902679,"version":"3.54.5"},"reference-count":44,"publisher":"Association for Computing Machinery (ACM)","issue":"ISSTA","funder":[{"name":"The National Key R&D Program of China","award":["2023YFB4503804"],"award-info":[{"award-number":["2023YFB4503804"]}]},{"DOI":"10.13039\/501100001809","name":"The National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["62402210"],"award-info":[{"award-number":["62402210"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"name":"The Leading-edge Technology Program of Jiangsu Natural Science Foundation","award":["BK20202001"],"award-info":[{"award-number":["BK20202001"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Proc. ACM Softw. Eng."],"published-print":{"date-parts":[[2025,6,22]]},"abstract":"<jats:p>Microservice architecture has revolutionized enterprise software, providing scalability and flexibility by decomposing applications into loosely coupled services. However, this paradigm shift introduces unique challenges for pointer analysis, a foundational static analysis crucial for supporting various client analyses. Existing fundamental analyses, primarily designed for monolithic enterprise applications, fall short in handling complex service communications\u2014such as remote procedure call and message-based communication\u2014and essential programming paradigms, like dependency injection and web endpoint configuration. This paper introduces Micans, the first pointer analysis specifically crafted to address these challenges in microservice systems, capable of constructing comprehensive value flows across services. We extensively evaluated Micans on real-world benchmarks from multiple domains, focusing on its effectiveness in resolving service communications, constructing essential program information like call graphs, and supporting client analyses such as taint analysis. Micans consistently and significantly outperforms state-of-the-art approaches, demonstrating its capacity to handle complex cross-service communications and diverse programming paradigms. These results highlight Micans' potential as a robust foundational analysis, advancing static analysis capabilities to meet the complexities of modern microservices.<\/jats:p>","DOI":"10.1145\/3728896","type":"journal-article","created":{"date-parts":[[2025,6,22]],"date-time":"2025-06-22T10:52:56Z","timestamp":1750589576000},"page":"504-526","source":"Crossref","is-referenced-by-count":4,"title":["Bridge the Islands: Pointer Analysis for Microservice Systems"],"prefix":"10.1145","volume":"2","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-3611-2775","authenticated-orcid":false,"given":"Teng","family":"Zhang","sequence":"first","affiliation":[{"name":"Nanjing University, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-6762-0233","authenticated-orcid":false,"given":"Yufei","family":"Liang","sequence":"additional","affiliation":[{"name":"Nanjing University, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-9688-6267","authenticated-orcid":false,"given":"Ganlin","family":"Li","sequence":"additional","affiliation":[{"name":"Nanjing University, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-3792-1237","authenticated-orcid":false,"given":"Tian","family":"Tan","sequence":"additional","affiliation":[{"name":"Nanjing University, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6299-4704","authenticated-orcid":false,"given":"Chang","family":"Xu","sequence":"additional","affiliation":[{"name":"Nanjing University, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-1285-2298","authenticated-orcid":false,"given":"Yue","family":"Li","sequence":"additional","affiliation":[{"name":"Nanjing University, Nanjing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,6,22]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/ECASE.2017.4"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3389955"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3385412.3386026"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594299"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3556910"},{"key":"e_1_2_1_6_1","unstructured":"Martin Fowler and James Lewis. 2014. Microservices. https:\/\/martinfowler.com\/articles\/microservices.html"},{"key":"e_1_2_1_7_1","unstructured":"Marvin Froeder. 2021. OpenFeign. https:\/\/github.com\/OpenFeign\/feign"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304013"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133926"},{"key":"e_1_2_1_10_1","unstructured":"Joab Jackson. 2022. How airbnb and twitter cut back on microservice complexities. https:\/\/thenewstack.io\/how-airbnb-and-twitter-cut-back-on-microservice-complexities\/"},{"key":"e_1_2_1_11_1","unstructured":"JetBrains. 2023. The State of Developer Ecosystem 2023 by JetBrains. https:\/\/www.jetbrains.com\/lp\/devecosystem-2023\/"},{"key":"e_1_2_1_12_1","unstructured":"Rod Johnson. 2023. Spring Framework Documentation. https:\/\/docs.spring.io\/spring-framework\/reference\/index.html"},{"key":"e_1_2_1_13_1","unstructured":"Rod Johnson. 2023. Spring Framework Documentation - The IoC Container. https:\/\/docs.spring.io\/spring-framework\/reference\/core\/beans.html"},{"key":"e_1_2_1_14_1","unstructured":"Rod Johnson. 2023. Spring Framework Documentation - Web on Servlet Stack. https:\/\/docs.spring.io\/spring-framework\/reference\/web.html"},{"key":"e_1_2_1_15_1","unstructured":"Michael Klishin. 2021. RabbitMQ. https:\/\/github.com\/rabbitmq\/rabbitmq-server"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236041"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3381915"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3295739"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.4230\/LIPICS.ECOOP.2016.15"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510457.3513029"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3472883.3487003"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3591242"},{"key":"e_1_2_1_23_1","unstructured":"Oracle. 2021. Overview of Enterprise Applications. https:\/\/docs.oracle.com\/javaee\/7\/firstcup\/java-ee001.htm"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00210"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3558951"},{"key":"e_1_2_1_26_1","volume-title":"Unveiling and Vanquishing Goroutine Leaks in Enterprise Microservices: A Dynamic Analysis Approach. In 2024 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO). 411\u2013422","author":"Saioc Georgian-Vlad","year":"2024","unstructured":"Georgian-Vlad Saioc, Dmitriy Shirchenko, and Milind Chabbi. 2024. Unveiling and Vanquishing Goroutine Leaks in Enterprise Microservices: A Dynamic Analysis Approach. In 2024 IEEE\/ACM International Symposium on Code Generation and Optimization (CGO). 411\u2013422."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3650212.3680333"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1561\/2500000014"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1926385.1926390"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594320"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/2048066.2048145"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598120"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485524"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3062341.3062360"},{"key":"e_1_2_1_35_1","volume-title":"Proceedings of the ACM on Programming Languages, 3, POPL","author":"Toman John","year":"2019","unstructured":"John Toman and Dan Grossman. 2019. Concerto: a framework for combined concrete and abstract interpretation. Proceedings of the ACM on Programming Languages, 3, POPL (2019), 1\u201329."},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1543135.1542486"},{"key":"e_1_2_1_37_1","unstructured":"Uber. 2022. The uber engineering tech stack part i. https:\/\/eng.uber.com\/tech-stack-part-one-foundation\/"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.3390\/app10217800"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3417059"},{"key":"e_1_2_1_40_1","unstructured":"Sheng Wu. 2023. SkyWalking: an APM (Application Performance Monitoring) system especially designed for microservices cloud native and container-based architectures. https:\/\/github.com\/apache\/skywalking"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","unstructured":"Teng Zhang Yufei Liang Ganlin Li Tian Tan Chang Xu and Yue Li. 2025. Bridge the Islands: Pointer Analysis for Microservice Systems (Artifact). https:\/\/doi.org\/10.5281\/zenodo.15050505 10.5281\/zenodo.15050505","DOI":"10.5281\/zenodo.15050505"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594328"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP58684.2023.00015"},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3183440.3194991"}],"container-title":["Proceedings of the ACM on Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3728896","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,16]],"date-time":"2025-07-16T16:50:59Z","timestamp":1752684659000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3728896"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,22]]},"references-count":44,"journal-issue":{"issue":"ISSTA","published-print":{"date-parts":[[2025,6,22]]}},"alternative-id":["10.1145\/3728896"],"URL":"https:\/\/doi.org\/10.1145\/3728896","relation":{},"ISSN":["2994-970X"],"issn-type":[{"value":"2994-970X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,22]]}}}